MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940
SHA3-384 hash: 8e6a5b23da69356306f0f0ab193582c4edfb16f21b80d9f77528f53a76b58d00955584e4315fb85d71839ef753bd8c7c
SHA1 hash: ab57983c77db1e9260f91b5362c891c7a90e1831
MD5 hash: ad630696d9601030e7f089f4b48c42f3
humanhash: twelve-butter-edward-low
File name:nvidia.py
Download: download sample
File size:3'966 bytes
First seen:2025-08-08 12:43:43 UTC
Last seen:Never
File type:
MIME type:text/x-script.python
ssdeep 48:Ax1M7U6Qg88ATSuQ8ex4x0F/HLvb+Sb1+SU6AAaagrbiq21Tlhf0ayYT1fhX8rey:AQP0temeF/Hr9b0wmJ8Zf8rslhw91
TLSH T1E381CE829CAE3C2145F0E41CD982D530CB0213675B613457BA6CB6984F318E7D5E4FAB
Magika python
Reporter JAMESWT_WT
Tags:py PyLangGhost

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
IT IT
Vendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6895f9b11e8a59ee04e77953
Tags:
n/a
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
threat
Link:
https://www.filescan.io/uploads/6895fa5e397fd3ce6fa2406c/reports/f64bea42-a99e-4a19-8f1e-8d2c7b6e7aab/overview
Verdict:
Suspicious
Labled as:
Trojan/Python.Agent
Link:
https://www.hybrid-analysis.com/sample/a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940
Score:
9%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940/
Threat name:
Script-Python.Trojan.Malgent
Create hunting rule
Status:
Malicious
First seen:
2025-06-24 02:29:01 UTC
File Type:
Text (Python)
AV detection:
8 of 22 (36.36%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uf44v4nx2kj7pqkaeg4a33wnfnblxvaj4bjnu5t6bu4d64lclfaa._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/250808-ql4ahaymt7/
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/a179caf1b7d293f7c14021b80deecd2b42bbd409e052da767e0d383f71625940

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments