MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b4caa833ce0e083ccd9093fb1c8c926ffe5a616e6904802813225a7ee9ca46d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b4caa833ce0e083ccd9093fb1c8c926ffe5a616e6904802813225a7ee9ca46d7
SHA3-384 hash:	4bf801d8d21bf05f944b4cdde99c8acbc671eb64e893e2b3fb89082477f7b934ea65c86da77798dbce039b3e23dc098b
SHA1 hash:	161e2cc759ca3698783bf46b281e995d799c186f
MD5 hash:	7832295112a9f7e478aa986760934601
humanhash:	bakerloo-hamper-jupiter-oregon
File name:	a
Download:	download sample
File size:	875 bytes
First seen:	2025-04-09 19:53:30 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:AGC9gfcy5QhyQhTxfQhRmKkOy52TUtx74lw4MzJhFZ3p4cVjDUZ9D0:AGWLy5QhyQh9QhNkO2xGGhzbXUY
TLSH	T10C11C0411901555142EDC4AD17CF200D758694AF76047F10A7FF3AA92B52895B3E86DF
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

88

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67f6d47a71beff15dccea8f1linux22vpnfull_triage

Tags:

mirai virus

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/b4caa833ce0e083ccd9093fb1c8c926ffe5a616e6904802813225a7ee9ca46d7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b4caa833ce0e083ccd9093fb1c8c926ffe5a616e6904802813225a7ee9ca46d7/

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-09 19:54:11 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wtfkqm6obyedztmqsp5rzdesn77fuyloneciakatejnh52oki3lq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/250409-ymktjs1kw4/

Behaviour

Reads runtime system information

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b4caa833ce0e083ccd9093fb1c8c926ffe5a616e6904802813225a7ee9ca46d7