MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee
SHA3-384 hash:	a63b71bdf5b6103a77ec168b10abd7b4ccae39e2de7af7724384b8eb540fd5d2cd965db795e562a746b0e781b76c95d5
SHA1 hash:	b7b802bdfde50990bfeb293d523ffadc08cef772
MD5 hash:	12cae4a5205518f419634f0b8b2f8c64
humanhash:	triple-uniform-connecticut-monkey
File name:	kraxe
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	471 bytes
First seen:	2025-12-05 18:21:00 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:sha8hexh0k5xhjqAxhU9IKAexhKNIxOixh3+sKGv:ea8heP0k5PjfPU9IyPKNIxJPOsKGv
TLSH	T149F01CB9082B7116C910BD21A26F299D7433DF9F6172CF5EE8C6B437A1CC9207836E54
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

15

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/693324c6bc15eab491f57d97/reports/ab7bda64-a979-4bee-86a6-23662951cd5a/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-05T16:20:00Z UTC

Last seen:

2025-12-07T12:20:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Heuristic

Threat name:

Document-HTML.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-05 18:30:31 UTC

File Type:

Text (Shell)

AV detection:

10 of 37 (27.03%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=z447h7zx2gowbn6ifpehhkouovmmsxn7ry2qnyxxckntbxkiutxa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251205-w5rzgatpgp/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/cf39f3ff37d19d60b7c82bc873a9d47558c95dbf8e3506e2f7129b30dd48a4ee