MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4
SHA3-384 hash:	6f826b3e901d01577da0428a044c490e377fcab8fd0967268c700371c9cb149a62e9283b88efab916d9d74946022143a
SHA1 hash:	67c94eb5e696d916934003d1a0264520153c8abf
MD5 hash:	ecffd6580d4155911f21939788c98a08
humanhash:	fix-mountain-glucose-washington
File name:	tp
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	290 bytes
First seen:	2025-01-14 20:57:11 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:h0J8JaiGHMFhHoFhExWY3Fqj/q4YFNT5NW:iGJ/GsFhHoFh+WfDYjS
TLSH	T16DD02B5E8156052B1C458FDCD1330C21FB29B1C514731FA9FF4EB17F7799820A4A16A4
Magika	shell
Reporter	abuse_ch
Tags:	gafgyt sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

114

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2243.11599.9954.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6787efebaa9c8e7858deeafclinux22vpnfull_triage

Tags:

phishing gafgyt mirai

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6786cfdaf6ef415507db84a0/reports/42da357a-6afc-463d-a940-a3f921668209/overview

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Dakkatoni

Threat name:

Script-Shell.Trojan.Dakkatoni

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-14 21:06:41 UTC

File Type:

Text (Shell)

AV detection:

15 of 38 (39.47%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xftjprdub5jo3b5rvgdn3w2522vy37czg2bzj5szzav5fm6ejksa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b96697c4740f52ed87b1a986dddb5dd6ab8dfc59368394f659c82bd2b3c44aa4