MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cc13bc0233a9a59d89b261d047de98865c35accd49422ff1a5db69b0961e3395. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cc13bc0233a9a59d89b261d047de98865c35accd49422ff1a5db69b0961e3395
SHA3-384 hash:	9e4104c73acff8ae5c4f7b942069e3870544cd042f94cc69c78040127321ec2556117156c4572c8dcb78004b4b2800b0
SHA1 hash:	2fa819d99482c07b7c3d9bec5d3e5c5aab2ebded
MD5 hash:	15a4787319244bdf399ed535dd531405
humanhash:	seventeen-august-texas-michigan
File name:	fetch.sh
Download:	download sample
File size:	436 bytes
First seen:	2024-09-03 04:36:15 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:f+MOfpnu/EzMvKoMwFTJFB3sgtyQhxDpR/n:GRMMzcKof9d3xtyQXtR/n
TLSH	T1F2E0E55222D79FDDF95EA4F5B3145981E0D0E1C82422CDACE8D160F4609AC08F1B5E9B
Magika	shell
Reporter	lontze7

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

88

Origin country :

FR

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66d69271f3d7ccf99f8fa9aa

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/66d6926e08bf8bf8e85c0ed0/reports/c4c6794e-310e-4f5f-b84c-4a6566d061f3/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/cc13bc0233a9a59d89b261d047de98865c35accd49422ff1a5db69b0961e3395

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cc13bc0233a9a59d89b261d047de98865c35accd49422ff1a5db69b0961e3395/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zqj3yartvgsz3cnsmhiepxuyqzodllgnjfbc74nf3nu3bfq6gokq._file

Threatray unknown

Verdict:

unknown

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/240903-e8s79sycrb/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/cc13bc0233a9a59d89b261d047de98865c35accd49422ff1a5db69b0961e3395