MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2
SHA3-384 hash: db1333ec165536c307ad1e31a548aa94d5064162594a45c593092b5625848dbf7cb9e4ab61d9eb28043f7f03dc283e15
SHA1 hash: fdbebb455420340b89fd7803cf227bd1bf652330
MD5 hash: 51314557bbfcb8e88094243436363672
humanhash: maryland-cola-minnesota-lactose
File name:194.9.6.40_1781436228834018_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.bin
Download: download sample
File size:28'650 bytes
First seen:2026-06-14 11:24:44 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 768:/umWOXcTmHBBGUUO5/sCY4kSwULlhgQXtIAUONhKk4E:/u+ImH/GnO5/RY4kkLkONX
TLSH T168D2DF34D4C82FBDEEAA2A1C06FA6620D7D68B1E9498860737477D9B4F37D80443751E
Magika php
Reporter Blackdome

Intelligence

File Origin
# of uploads :
1
# of downloads :
50
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a2e8fc034eaf30d8ce5e6ad
Tags:
n/a
Verdict:
Malicious
Labled as:
PHP/Kryptik.CZ trojan
Link:
https://www.hybrid-analysis.com/sample/92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2
Verdict:
Malicious
File Type:
text
First seen:
2026-06-14T10:09:00Z UTC
Last seen:
2026-06-15T22:49:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2/results?tab=lookup
Score:
92%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/92d7869ae1436e10770db8a2602f191ec1931be4008e45edc13dbc9e60d9e1f2/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-06-14 11:34:27 UTC
File Type:
Text (PHP)
AV detection:
8 of 24 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sllyngxbinxba5ynxcrgalyzd3azgg7eachel3obhw6j4ygz4hza._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments