MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bc9a95a18814c039e8f496ff1c3d1e6f0c2bf6194a4f1527db080a4b57b8399c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bc9a95a18814c039e8f496ff1c3d1e6f0c2bf6194a4f1527db080a4b57b8399c
SHA3-384 hash:	315dac65debaf568ba61f868caab4b516e082228166fd2521baad27de877e0810c5e2b76fcb15de1d1e27fc13a617448
SHA1 hash:	dae4f94561d45005c7c04566e123c1e3b6e78351
MD5 hash:	6258aff52285108072e96ca3afff30f8
humanhash:	lemon-charlie-zulu-table
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	879 bytes
First seen:	2025-06-12 12:18:31 UTC
Last seen:	2025-06-13 05:19:19 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:9csYGtcsYrDcsYmGNIxyIcsY9XK9OcsYcncsYV0OcsYfkrcsYJDcsYlbcsY6xcsN:9dxtdmDd/vd0XLddndk0OdykrdKDdubN
TLSH	T1FC11CEFD4059BD054A1CCF0DE1732E20AA05CDD4B6D58A98E7B9D4368989E2C303CA09
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

66

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=684ac5ce8bd5d68a12e817e0linux22vpnfull_triage

Tags:

agent hype sage

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/bc9a95a18814c039e8f496ff1c3d1e6f0c2bf6194a4f1527db080a4b57b8399c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/bc9a95a18814c039e8f496ff1c3d1e6f0c2bf6194a4f1527db080a4b57b8399c/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-12 12:19:20 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xsnjlimictadt2hus37rypi6n4gcx5qzjjhrkj63bafewv5yhgoa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250612-phcspsvkw6/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/bc9a95a18814c039e8f496ff1c3d1e6f0c2bf6194a4f1527db080a4b57b8399c