MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f
SHA3-384 hash:	0eb813ea2ad4181257c9c9f8ccbddc0d4e34c16309bb32cc7f372e6e2b03d2e26e7b7d779e946e9e9c4b0da8990eda56
SHA1 hash:	14c5514e76f7f98d87ee61d95b214c5afcc5776b
MD5 hash:	3cf42e1587fb55eef14ea1ea616c9d45
humanhash:	carolina-mountain-eleven-salami
File name:	prt (4).py
Download:	download sample
Signature	Braodo Alert Create hunting rule
File size:	1'396'721 bytes
First seen:	2025-05-15 07:10:25 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	1536:djUf34y+CdD3Gh/UeTOREFMaMsrTj146/DyD5F9tSwB/xKYWQ3:xUbDWh/UcO68srTjO9PUCQY7
TLSH	T16D554123C1B75F5A5CBE723B8F520DE19F1EF0DF14C672EAB423999629052F214D0AA4
Magika	txt
Reporter	JAMESWT_WT
Tags:	Braodo py

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

128

Origin country :

IT

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=682594694a59e5a2ce04bb51

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68259379c609634bd7c2f4c0/reports/677ccca0-e6f8-4759-a7c3-80c388cf8de1/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f

Nucleon Malprob Malware

Score:

89%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f/

ReversingLabs TitaniumCloud Script-Python.Trojan.Malgent

Threat name:

Script-Python.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-15 07:09:21 UTC

File Type:

Text

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xbxex74tlw4tixgbiz7gcx7u7prjf6xgdcxje5mv2mum7wpiuchq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250515-hzpp9san6w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Braodo

Threat name:

Braodo

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b86e4bff935db9345cc1467e615ff4fbe292fae618ae927595d328cfd9e8a08f