MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760
SHA3-384 hash: bed20e908e3b0d39ed4102278e9e05e97995bf41753edaeea4bdf508024092dcf4d3a2d1bca55f14aa06101296d2b460
SHA1 hash: a8b6ff2c10bbc4f5a444d5ad84ccb69d35ed90cc
MD5 hash: 6050070d7677903bf9b2c42e4cb542e4
humanhash: vermont-oscar-april-lake
File name:wr.php
Download: download sample
File size:27'042 bytes
First seen:2026-07-30 12:42:40 UTC
Last seen:2026-07-31 11:58:34 UTC
File type: sh
MIME type:text/x-shellscript
ssdeep 768:Kw88vCB+25j6es8RK9FYpMSUpi+20qUpi+20YQX:KL8l25J8d2QX
TLSH T15BC28D966A867C44BEC94A3E4CBD2B1D6DF5C3D1324942AC3D8A3C71DC11FACD618B1A
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://160.119.69.4/z/post/noroot.phpn/an/aelf ua-wget

Intelligence

File Origin
# of uploads :
4
# of downloads :
66
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Linux.DownLoader.2862.27695.2964.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive masquerade
Link:
https://www.filescan.io/uploads/6a6b46ee14a08308efee3391/reports/b2e21efd-72ee-4baf-a46d-d05b0cc9b40b/overview
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-07-30T10:56:00Z UTC
Last seen:
2026-07-30T11:05:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/c0f8a955-eaaf-4f26-8e7c-2bca4ba4b909
Behavior Graph:
Download SVG
%3 guuid=b0ee6f22-1700-0000-548d-60d44a0d0000 pid=3402 /usr/bin/sudo guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408 /tmp/sample.bin guuid=b0ee6f22-1700-0000-548d-60d44a0d0000 pid=3402->guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408 execve guuid=c7f2e225-1700-0000-548d-60d4520d0000 pid=3410 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=c7f2e225-1700-0000-548d-60d4520d0000 pid=3410 clone guuid=b8b91926-1700-0000-548d-60d4530d0000 pid=3411 /usr/bin/base64 guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=b8b91926-1700-0000-548d-60d4530d0000 pid=3411 execve guuid=28404c26-1700-0000-548d-60d4540d0000 pid=3412 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=28404c26-1700-0000-548d-60d4540d0000 pid=3412 clone guuid=6e694028-1700-0000-548d-60d4550d0000 pid=3413 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=6e694028-1700-0000-548d-60d4550d0000 pid=3413 execve guuid=f5006629-1700-0000-548d-60d4560d0000 pid=3414 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=f5006629-1700-0000-548d-60d4560d0000 pid=3414 execve guuid=49e15d2a-1700-0000-548d-60d4580d0000 pid=3416 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=49e15d2a-1700-0000-548d-60d4580d0000 pid=3416 execve guuid=73a5112b-1700-0000-548d-60d4590d0000 pid=3417 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=73a5112b-1700-0000-548d-60d4590d0000 pid=3417 execve guuid=4f60a92b-1700-0000-548d-60d45c0d0000 pid=3420 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=4f60a92b-1700-0000-548d-60d45c0d0000 pid=3420 execve guuid=79c13e2c-1700-0000-548d-60d45f0d0000 pid=3423 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=79c13e2c-1700-0000-548d-60d45f0d0000 pid=3423 execve guuid=a940dc2c-1700-0000-548d-60d4630d0000 pid=3427 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=a940dc2c-1700-0000-548d-60d4630d0000 pid=3427 execve guuid=f0f47b2d-1700-0000-548d-60d4670d0000 pid=3431 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=f0f47b2d-1700-0000-548d-60d4670d0000 pid=3431 execve guuid=19e4262e-1700-0000-548d-60d46b0d0000 pid=3435 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=19e4262e-1700-0000-548d-60d46b0d0000 pid=3435 execve guuid=d189df2e-1700-0000-548d-60d46f0d0000 pid=3439 /usr/bin/mkdir guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=d189df2e-1700-0000-548d-60d46f0d0000 pid=3439 execve guuid=b1f3b02f-1700-0000-548d-60d4740d0000 pid=3444 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=b1f3b02f-1700-0000-548d-60d4740d0000 pid=3444 execve guuid=6699ce30-1700-0000-548d-60d47a0d0000 pid=3450 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=6699ce30-1700-0000-548d-60d47a0d0000 pid=3450 execve guuid=50eacf31-1700-0000-548d-60d4820d0000 pid=3458 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=50eacf31-1700-0000-548d-60d4820d0000 pid=3458 execve guuid=1cf92533-1700-0000-548d-60d4850d0000 pid=3461 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=1cf92533-1700-0000-548d-60d4850d0000 pid=3461 execve guuid=47a42435-1700-0000-548d-60d48c0d0000 pid=3468 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=47a42435-1700-0000-548d-60d48c0d0000 pid=3468 execve guuid=829f1636-1700-0000-548d-60d4910d0000 pid=3473 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=829f1636-1700-0000-548d-60d4910d0000 pid=3473 execve guuid=aa5efa36-1700-0000-548d-60d4950d0000 pid=3477 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=aa5efa36-1700-0000-548d-60d4950d0000 pid=3477 execve guuid=328af237-1700-0000-548d-60d4990d0000 pid=3481 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=328af237-1700-0000-548d-60d4990d0000 pid=3481 execve guuid=1f7fd538-1700-0000-548d-60d49e0d0000 pid=3486 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=1f7fd538-1700-0000-548d-60d49e0d0000 pid=3486 execve guuid=d6613b39-1700-0000-548d-60d4a00d0000 pid=3488 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=d6613b39-1700-0000-548d-60d4a00d0000 pid=3488 execve guuid=0f17ab39-1700-0000-548d-60d4a30d0000 pid=3491 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=0f17ab39-1700-0000-548d-60d4a30d0000 pid=3491 execve guuid=5579023a-1700-0000-548d-60d4a50d0000 pid=3493 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=5579023a-1700-0000-548d-60d4a50d0000 pid=3493 execve guuid=2d06743a-1700-0000-548d-60d4a70d0000 pid=3495 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=2d06743a-1700-0000-548d-60d4a70d0000 pid=3495 execve guuid=b414f93a-1700-0000-548d-60d4aa0d0000 pid=3498 /usr/bin/cp guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=b414f93a-1700-0000-548d-60d4aa0d0000 pid=3498 execve guuid=40f2503b-1700-0000-548d-60d4ad0d0000 pid=3501 /usr/bin/touch guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=40f2503b-1700-0000-548d-60d4ad0d0000 pid=3501 execve guuid=698c923b-1700-0000-548d-60d4ae0d0000 pid=3502 /usr/bin/chmod guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=698c923b-1700-0000-548d-60d4ae0d0000 pid=3502 execve guuid=e4fbd83b-1700-0000-548d-60d4b00d0000 pid=3504 /usr/bin/chmod guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=e4fbd83b-1700-0000-548d-60d4b00d0000 pid=3504 execve guuid=fa841f3c-1700-0000-548d-60d4b20d0000 pid=3506 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=fa841f3c-1700-0000-548d-60d4b20d0000 pid=3506 execve guuid=ca46843c-1700-0000-548d-60d4b40d0000 pid=3508 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=ca46843c-1700-0000-548d-60d4b40d0000 pid=3508 execve guuid=5e34d03c-1700-0000-548d-60d4b60d0000 pid=3510 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=5e34d03c-1700-0000-548d-60d4b60d0000 pid=3510 execve guuid=26261d3d-1700-0000-548d-60d4b90d0000 pid=3513 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=26261d3d-1700-0000-548d-60d4b90d0000 pid=3513 execve guuid=ea106a3d-1700-0000-548d-60d4ba0d0000 pid=3514 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=ea106a3d-1700-0000-548d-60d4ba0d0000 pid=3514 execve guuid=1e5eb83d-1700-0000-548d-60d4bc0d0000 pid=3516 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=1e5eb83d-1700-0000-548d-60d4bc0d0000 pid=3516 execve guuid=3a25023e-1700-0000-548d-60d4be0d0000 pid=3518 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=3a25023e-1700-0000-548d-60d4be0d0000 pid=3518 execve guuid=f72c553e-1700-0000-548d-60d4c00d0000 pid=3520 /usr/bin/chattr guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=f72c553e-1700-0000-548d-60d4c00d0000 pid=3520 execve guuid=5adda63e-1700-0000-548d-60d4c10d0000 pid=3521 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=5adda63e-1700-0000-548d-60d4c10d0000 pid=3521 clone guuid=0ac3ae3e-1700-0000-548d-60d4c20d0000 pid=3522 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=0ac3ae3e-1700-0000-548d-60d4c20d0000 pid=3522 clone guuid=c7e1ca3e-1700-0000-548d-60d4c30d0000 pid=3523 /usr/bin/curl net send-data guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=c7e1ca3e-1700-0000-548d-60d4c30d0000 pid=3523 execve guuid=bdecd13e-1700-0000-548d-60d4c40d0000 pid=3524 /usr/bin/dash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=bdecd13e-1700-0000-548d-60d4c40d0000 pid=3524 execve guuid=fea39049-1700-0000-548d-60d4e30d0000 pid=3555 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=fea39049-1700-0000-548d-60d4e30d0000 pid=3555 clone guuid=0c8d9549-1700-0000-548d-60d4e40d0000 pid=3556 /usr/bin/base64 guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=0c8d9549-1700-0000-548d-60d4e40d0000 pid=3556 execve guuid=33f79949-1700-0000-548d-60d4e50d0000 pid=3557 /usr/bin/tee write-file guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=33f79949-1700-0000-548d-60d4e50d0000 pid=3557 execve guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562 execve guuid=b9c6934f-1700-0000-548d-60d4030e0000 pid=3587 /usr/bin/bash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=b9c6934f-1700-0000-548d-60d4030e0000 pid=3587 execve guuid=c8ece04f-1700-0000-548d-60d4050e0000 pid=3589 /usr/bin/rm delete-file guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=c8ece04f-1700-0000-548d-60d4050e0000 pid=3589 execve guuid=0c511550-1700-0000-548d-60d4060e0000 pid=3590 /usr/bin/rm guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=0c511550-1700-0000-548d-60d4060e0000 pid=3590 execve guuid=d66b4b50-1700-0000-548d-60d4080e0000 pid=3592 /usr/bin/curl net send-data guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=d66b4b50-1700-0000-548d-60d4080e0000 pid=3592 execve guuid=efb64f50-1700-0000-548d-60d4090e0000 pid=3593 /usr/bin/dash guuid=86c3cc24-1700-0000-548d-60d4500d0000 pid=3408->guuid=efb64f50-1700-0000-548d-60d4090e0000 pid=3593 execve 124ee36c-bdbd-5d46-bbb1-b2cd81367f04 160.119.69.4:80 guuid=c7e1ca3e-1700-0000-548d-60d4c30d0000 pid=3523->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B guuid=2593e24a-1700-0000-548d-60d4eb0d0000 pid=3563 /usr/bin/bash guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=2593e24a-1700-0000-548d-60d4eb0d0000 pid=3563 clone guuid=2a6ce74a-1700-0000-548d-60d4ec0d0000 pid=3564 /usr/bin/bash guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=2a6ce74a-1700-0000-548d-60d4ec0d0000 pid=3564 clone guuid=01a0064b-1700-0000-548d-60d4ed0d0000 pid=3565 /usr/bin/ls guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=01a0064b-1700-0000-548d-60d4ed0d0000 pid=3565 execve guuid=c8b2774b-1700-0000-548d-60d4ef0d0000 pid=3567 /usr/bin/cat guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=c8b2774b-1700-0000-548d-60d4ef0d0000 pid=3567 execve guuid=b330b54b-1700-0000-548d-60d4f00d0000 pid=3568 /usr/bin/ls guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=b330b54b-1700-0000-548d-60d4f00d0000 pid=3568 execve guuid=06a90a4c-1700-0000-548d-60d4f10d0000 pid=3569 /usr/bin/mkdir guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=06a90a4c-1700-0000-548d-60d4f10d0000 pid=3569 execve guuid=16bb5c4c-1700-0000-548d-60d4f20d0000 pid=3570 /usr/bin/mv guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=16bb5c4c-1700-0000-548d-60d4f20d0000 pid=3570 execve guuid=aa95be4c-1700-0000-548d-60d4f30d0000 pid=3571 /usr/bin/bash guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=aa95be4c-1700-0000-548d-60d4f30d0000 pid=3571 clone guuid=544bc84c-1700-0000-548d-60d4f40d0000 pid=3572 /usr/bin/base64 write-file guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=544bc84c-1700-0000-548d-60d4f40d0000 pid=3572 execve guuid=58f2254d-1700-0000-548d-60d4f60d0000 pid=3574 /usr/bin/rm delete-file guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=58f2254d-1700-0000-548d-60d4f60d0000 pid=3574 execve guuid=5cdd5f4d-1700-0000-548d-60d4f90d0000 pid=3577 /usr/bin/mv guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=5cdd5f4d-1700-0000-548d-60d4f90d0000 pid=3577 execve guuid=f622bc4d-1700-0000-548d-60d4fa0d0000 pid=3578 /usr/bin/ls guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=f622bc4d-1700-0000-548d-60d4fa0d0000 pid=3578 execve guuid=b7ed1b4e-1700-0000-548d-60d4fb0d0000 pid=3579 /usr/bin/bash guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=b7ed1b4e-1700-0000-548d-60d4fb0d0000 pid=3579 clone guuid=72c7204e-1700-0000-548d-60d4fc0d0000 pid=3580 /usr/bin/base64 write-file guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=72c7204e-1700-0000-548d-60d4fc0d0000 pid=3580 execve guuid=40f4764e-1700-0000-548d-60d4fd0d0000 pid=3581 /usr/bin/ls guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=40f4764e-1700-0000-548d-60d4fd0d0000 pid=3581 execve guuid=2c4ad14e-1700-0000-548d-60d4010e0000 pid=3585 /usr/bin/cat guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=2c4ad14e-1700-0000-548d-60d4010e0000 pid=3585 execve guuid=c9b20f4f-1700-0000-548d-60d4020e0000 pid=3586 /usr/bin/ls guuid=fcde9a4a-1700-0000-548d-60d4ea0d0000 pid=3562->guuid=c9b20f4f-1700-0000-548d-60d4020e0000 pid=3586 execve guuid=d66b4b50-1700-0000-548d-60d4080e0000 pid=3592->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B
Score:
82%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760/
Threat name:
Linux.Backdoor.WebShell
Create hunting rule
Status:
Malicious
First seen:
2026-07-30 12:43:33 UTC
File Type:
Text (Shell)
AV detection:
12 of 24 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wlddyzoy2rwkdw5v6yiiq3z77cvekaxrccm4euhxc6he36bz65qa._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
antivm defense_evasion discovery linux
Link:
https://tria.ge/reports/260730-px46hayarb/
Behaviour
Reads runtime system information
Writes file to tmp directory
Deobfuscate/Decode Files or Information
Checks CPU configuration
File and Directory Permissions Modification
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.16
Link:
https://yomi.yoroi.company/submissions/b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:SUSP_LNX_Base64_Exec_Apr24
Create hunting rule
Author:Christian Burkard
Description:Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Reference:Internal Research

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh b2c63c65d8d46ca1dbb5f610886f3ff8aa4502f11099c250f7178e4df839f760

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3884409/
  
Delivery method
Distributed via web download

Comments