MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364
SHA3-384 hash: af211431ff5ba53114c13ce40f1f2dee2dd319a24b8c497c029023bac255cf42bb8272858a053657109309173af71d19
SHA1 hash: afc19c0118d0e220c7f2ed59530a3e0c3664e6c5
MD5 hash: be756a41c6552cc51eff7238daaa83f9
humanhash: tango-golf-music-massachusetts
File name:194.9.6.40_1781487657876802_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.bin
Download: download sample
File size:28'662 bytes
First seen:2026-06-15 02:17:04 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 768:OumWOXcTmHBBGUUO5/sCY4kSwULlhgQXtIAUONhKk4E:Ou+ImH/GnO5/RY4kkLkONX
TLSH T168D2DF34C4D83FBDEEAA2A1C06FA6620D7D68B1E9498860637477D9B4F37D80442751E
Magika php
Reporter Blackdome

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a2f60cb34eaf30d8ce6320d
Tags:
n/a
Verdict:
Malicious
Labled as:
PHP/Kryptik.CZ trojan
Link:
https://www.hybrid-analysis.com/sample/cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-06-15T00:34:00Z UTC
Last seen:
2026-06-16T23:25:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364/results?tab=lookup
Score:
92%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364/
Threat name:
Script-PHP.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2026-06-15 02:19:39 UTC
File Type:
Text (PHP)
AV detection:
10 of 24 (41.67%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zwu32d3vjxk6e2pbtqfd2bhtqh7uytwlezikm4hfd5z7jtytinsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/cda9bd0f754dd5e269e19c0a3d04f381ff4c4ecb2650a670e51f73f4cf134364

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments