MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52
SHA3-384 hash: 1d734e537aef5b21415d60c9c5ec00c582873a186e839084deb81de0a1a4a16c2c894abd030c9a303ed82c7d0cb4595b
SHA1 hash: 0cccc376bed7d5f188b62b514148e0058d86ea66
MD5 hash: 638cdbb7485a7a44e0c4c13319398fbb
humanhash: fish-pluto-ten-network
File name:194.9.6.40_1781314541920951_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.bin
Download: download sample
File size:28'656 bytes
First seen:2026-06-13 01:36:17 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 768:sumWOXcTmHBBGUUO5/sCY4kSwULlhgQXtIAUONhKk4E:su+ImH/GnO5/RY4kkLkONX
TLSH T1ACD2DF34C8D82FBDEEAA2A1C06FA6620D7D68B1E9498860737477D9B4F37D80443751E
Magika php
Reporter Blackdome

Intelligence

File Origin
# of uploads :
1
# of downloads :
50
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Score:
70%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a2cb42a34eaf30d8ce55bba
Tags:
infosteal
Verdict:
Malicious
Labled as:
PHP/Kryptik.CZ trojan
Link:
https://www.hybrid-analysis.com/sample/cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52
Score:
92%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52/
Gathering data
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zw5pkqay2b3txn6475afbngcintcqrfl5may2hgh5vysx4ywlzja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/cdbaf54018d0773bb7dcff4050b4c243662844abeb018d1cc7ed712bf3165e52

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments