MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92420f545f34ddbcfda20c065d11f7396f0e043e8d4f7cfc45eec3d5ac430830. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	92420f545f34ddbcfda20c065d11f7396f0e043e8d4f7cfc45eec3d5ac430830
SHA3-384 hash:	abcabedb2dfcc9d8d531bd18f8f231fc890bb8d0835abaf0e9870bcbb1c2db66fc662b4e0a25b0f4aabdb4ecad1c2501
SHA1 hash:	6626b890b8d711209432eda98f76ce364f82e768
MD5 hash:	6fedae6e739f729132a84182e514995b
humanhash:	maine-sweet-bluebird-jig
File name:	dl16
Download:	download sample
File size:	7'593 bytes
First seen:	2025-05-04 09:06:34 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	96:XH5ztwRhgdxJbRJuiDi0digXihGqKYEtdXUYZoD4koDBwYrhzfp3faSd+:X9e/xe6XL
TLSH	T153F196CC02E542316447375FBBD42B64CCA413B17CB70F96F8A1CB886970998F66AB6D
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

68

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68172ef08474cc94a4e3be62linux22vpnfull_triage

Tags:

virus hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/68172e3dbab2591d06539984/reports/0a301e1c-0037-445e-821c-4b8ed0adcd38/overview

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/92420f545f34ddbcfda20c065d11f7396f0e043e8d4f7cfc45eec3d5ac430830

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/92420f545f34ddbcfda20c065d11f7396f0e043e8d4f7cfc45eec3d5ac430830/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-04 09:07:07 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=sjba6vc7gto3z7ncbqdf2epxhfxq4bb6rvhxz7cf53b5llcdbaya._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  10/10

Tags:

antivm defense_evasion discovery linux

Link:

https://tria.ge/reports/250504-k3bnxssm14/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Checks CPU configuration

File and Directory Permissions Modification

Executes dropped EXE

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/92420f545f34ddbcfda20c065d11f7396f0e043e8d4f7cfc45eec3d5ac430830