MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb
SHA3-384 hash:	9e04c70f2bd0aa0f1d724ec7db639f57a88ced3daacc6a1eb3550220864fd20d2a2cda4a7ad3efb51ef14a86afe55643
SHA1 hash:	01498bd8fd55df0f2b10d357e8dea50214bf7eb1
MD5 hash:	f8117766556052a0594e297a720183b6
humanhash:	seventeen-sixteen-vegan-thirteen
File name:	ex
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	787 bytes
First seen:	2025-02-04 00:36:46 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:9UIKiX2KX0TOu6AUOBHTyGdG9L+W4hDtqGn0Oal3:fP2KEbUYHTyGs9/Oh0Oq3
TLSH	T1CA0187CD0834EE4280586AAB359292B77716CBA8B0AF87E4FFC9116D449D6417060FD6
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

122

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67a1b7ba51193558eb195340linux22vpnfull_triage

Tags:

shellcode phishing agent overt

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67a1613a06d12bc30bf67b5e/reports/077365bc-5f96-4cad-858b-4b11fd4111c1/overview

Hybrid Analysis HTML/ExpKit.Gen2

Verdict:

Malicious

Labled as:

HTML/ExpKit.Gen2

Link:

https://www.hybrid-analysis.com/sample/bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-04 03:56:27 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=x466xdabtpvvpu6cktjtiygjyli7oorsbgkjxqqgpm7txhh2blfq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/bf3deb8c019beb57d3c254d33460c9c2d1f73a3209949bc2067b3f3b9cfa0acb