MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4
SHA3-384 hash:	54743991f0ccefb6becce696ae19bfcc0070dc89ed84257447b6f2053bd51d2c5bc35bbb9b350bea987833a038bdf563
SHA1 hash:	b4029a7a8fbfa3e0213011888c284b2109da9086
MD5 hash:	da2162468f2b050077637681e46ea918
humanhash:	alaska-item-green-hydrogen
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'125 bytes
First seen:	2025-03-26 09:02:41 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:qD+7UI70GD+CInD+xIkTD+NIaD+fSIfD+hIOD+aIfD+5IGD+xNIlIxD+fIwD+mIL:qD+7t7tD+XnD+mkTD+iaD+fHfD+2OD+H
TLSH	T18F21688E4369EF048D3BDF20B816C63446479580E8FE6F86D98CC7E3A5DA520B148F5B
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

87

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67e3c2e012b5dc44da3e2f48linux22vpnfull_triage

Tags:

downloader trojan agent

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67e3c2d96a150b67eec6bcf4/reports/d5e0870e-d035-41e6-8d90-754b00254f15/overview

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Alevaul

Threat name:

Document-HTML.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-26 16:52:13 UTC

AV detection:

16 of 38 (42.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=v5e4qynoxwim6zstaxc5ef3sfjfxvc4liqafq64ktjw7x52cw7sa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250326-kz6pwszyfs/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4