MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ba14419beb2ec0bb94cab6298c14d7fb3e1d819366fe378290c0c2a4d97f7e07. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ba14419beb2ec0bb94cab6298c14d7fb3e1d819366fe378290c0c2a4d97f7e07
SHA3-384 hash:	baa2990ad9a30a104584cc4c3787138dd297c843abd80c403ee3ef024dfad25bb1b6b0972553d87b8f77f980df315a4d
SHA1 hash:	96ef81fd75ccc9aa332a197714103b301ac46d89
MD5 hash:	7149a104d8e4a1287c7c390ada9bde01
humanhash:	skylark-lake-burger-utah
File name:	tunnel.jsp
Download:	download sample
File size:	19'992 bytes
First seen:	2026-09-29 00:26:49 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	384:jRESXLq8ubm2wNae7Z02fGD44+CWmUa5Wq6BVWz7wR7Rh:jRESpuQN8D446jA7gFh
TLSH	T1DC925F9EC3494A5CC7EC6F8990E9298E57E0C11B3C2C159DABF765C3E576A0D3034AE8
Magika	xml
Reporter	smica83
Tags:	jsp ShinyHunters UNC6240

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

8

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Java.Backdoor.Webshell-10044453-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6abb5b39e82d65e79f3f5abf/reports/fa2b8fda-336c-44d3-8037-56a51db6f1e0/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2023-10-27T01:22:00Z UTC

Last seen:

2026-09-30T19:16:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/ba14419beb2ec0bb94cab6298c14d7fb3e1d819366fe378290c0c2a4d97f7e07/results?tab=lookup

Nucleon Malprob Benign

Score:

8%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/ba14419beb2ec0bb94cab6298c14d7fb3e1d819366fe378290c0c2a4d97f7e07

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud ByteCode-JAVA.Backdoor.WebShell

Threat name:

ByteCode-JAVA.Backdoor.WebShell

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-09-10 09:46:13 UTC

File Type:

Text (Java)

AV detection:

16 of 36 (44.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xikedg7lf3alxfgkwyuyyfgx7m7b3amtm37dpauqydbkjwl7pydq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Exploit

Threat name:

Exploit

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ba14419beb2ec0bb94cab6298c14d7fb3e1d819366fe378290c0c2a4d97f7e07