MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb35053d78f1023e2142b48716385764eab0bbaa1690194350d36c427b08eded. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cb35053d78f1023e2142b48716385764eab0bbaa1690194350d36c427b08eded
SHA3-384 hash:	c0fa9db128ddc8e6fe4659adc9cf3f0bb970f5d665d6e80d7fc88d0c21877df228cedcba0e2c389ec3b4d492705eb483
SHA1 hash:	5df1b600ac5da3fa77dbaee7cdd3ddde1b641934
MD5 hash:	b18399e49b7d97b95d44efc66ff52270
humanhash:	kitten-fourteen-nebraska-thirteen
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	145 bytes
First seen:	2025-02-21 14:17:26 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:JnFSXiLdjX4wgOOd+WEWoDjiLdjX41Le5OOdMa72:JoXoZX4wgboXoZX41Le54L
TLSH	T14BC04CE554A01F54D0DEE54936968D2B504787ECACC7C79D6CA607260C45510FD94EC5
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

76

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67b88b2728ab76d43a5c4f34linux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/67b88b21ea4978452df2aa4a/reports/59ea290a-9217-474a-b08b-e97b9e54d701/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

12%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/cb35053d78f1023e2142b48716385764eab0bbaa1690194350d36c427b08eded

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cb35053d78f1023e2142b48716385764eab0bbaa1690194350d36c427b08eded/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zm2qkply6ebd4ikcwsdrmocxmtvlbo5kc2ibsq2q2nwee6yi5xwq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250221-rmb33stmdl/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/cb35053d78f1023e2142b48716385764eab0bbaa1690194350d36c427b08eded