MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056
SHA3-384 hash:	13227ab14f77032f9735f9e25041ebef45adf7bd12dd5fd57a64ab177ee17bde2443c40428c7b13c43d792fff5fbe3d9
SHA1 hash:	421f462f50f058c5b9fa17702a4f342957996cdb
MD5 hash:	f68b440b958ae6cdee4200f869f73b40
humanhash:	seven-sad-freddie-pennsylvania
File name:	p
Download:	download sample
File size:	4'027 bytes
First seen:	2024-10-17 18:31:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:sSTp5eSoUkxHkxHkxHkxtZWZqHkxvkxua8Pwe0kxvJRdkx7qqkx/kxvrkF:hCqyKVEaMF3TAAKWF
TLSH	T17A812ACA399840B24F68C9DFF662CDBE700E07C8B4E1CB5C5F4644D79A15A7A7105E91
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

68

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67122d3434f884d15c8ca517

Tags:

Mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6711582cb8693873ac834fb5/reports/0718fe3b-9dea-45f9-85f1-f7a559079d0b/overview

Hybrid Analysis Trojan.Agent

Verdict:

Malicious

Labled as:

Trojan.Agent

Link:

https://www.hybrid-analysis.com/sample/cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Malware

Score:

82%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056/

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2024-10-17 19:11:03 UTC

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zwmywc4tnzekgzmpveeguasc34ttkaelvs36uj4jtuvtlgh2sbla._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/cd998b0b936e48a3658fa9086a0242df2735008bacb7ea27899d2b3598fa9056