MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf1300d92066f64202bcefd9ab1736ed59c0089c9e30c4da501f5dc4e21af111. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cf1300d92066f64202bcefd9ab1736ed59c0089c9e30c4da501f5dc4e21af111
SHA3-384 hash:	fc0faeaf1f0f72ff3adb9744f9de1902c35a4ffd8c28407b664c1c1d626b033f0273889f641bddb25c974e9d5e25b2a2
SHA1 hash:	f12761fc392d221eb87d92a714fee19fad8d8a91
MD5 hash:	90f53265497a62676e6e67f4ed4da2da
humanhash:	winter-violet-rugby-solar
File name:	curl.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'440 bytes
First seen:	2025-02-11 15:02:12 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:s7nrdQXCv2Lt/JZEhzlBmyvn3tmwJ0yZhhs/:OkJqNmx
TLSH	T13721B446007098263E6D7A9B32F68919731B726F24DA4F0AA4DC31F99C9CFC865D6393
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

93.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67ab670cf667f46cd1830967linux22vpnfull_triage

Tags:

malware

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/67ab66c4c0f303a5682d71d2/reports/3ada97fa-556d-45ba-9bf4-eb43789b844c/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/cf1300d92066f64202bcefd9ab1736ed59c0089c9e30c4da501f5dc4e21af111

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cf1300d92066f64202bcefd9ab1736ed59c0089c9e30c4da501f5dc4e21af111/

ReversingLabs TitaniumCloud Document-HTML.Browser.Heuristic

Threat name:

Document-HTML.Browser.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-11 15:03:16 UTC

File Type:

Text (Shell)

AV detection:

6 of 38 (15.79%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=z4jqbwjam33eeav457m2wfzw5vm4ace4tyymjwsqd5o4jyq26eiq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

discovery

Link:

https://tria.ge/reports/250211-seqryaylft/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

System Network Configuration Discovery: Internet Connection Discovery

Downloads MZ/PE file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/cf1300d92066f64202bcefd9ab1736ed59c0089c9e30c4da501f5dc4e21af111