MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d52cef8cda577da06b02326ea0cb6b6df55b6149018c2e091843c43414eacd71. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d52cef8cda577da06b02326ea0cb6b6df55b6149018c2e091843c43414eacd71
SHA3-384 hash: 7006f43b7dee1e299aabe1cb26c35234b7a9cfe6b1d430411dd4984af68274a6fbe622ab73dcb63bdbe04cd861684538
SHA1 hash: f8e98b34dce1431509d013427c0000190cfe6ffa
MD5 hash: e01a4b69a041fdd05e68a2c615640705
humanhash: skylark-hamper-connecticut-utah
File name:wr.php
Download: download sample
File size:27'042 bytes
First seen:2026-08-15 08:56:16 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 768:z8vCB+25j6es8Ri9FYpMSUpi+20qUpi+20YQX:z8l25JEd2QX
TLSH T171C27D956A867C44BEC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
55
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive masquerade
Link:
https://www.filescan.io/uploads/6a8029ba6451d1d61f2e63c7/reports/4a38429f-d9ac-40c8-a497-9d00a80fdff7/overview
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/faae65d3-d18d-4b3f-b58d-c58b7eabde84
Behavior Graph:
Download SVG
%3 guuid=150c24ac-1600-0000-e079-ee3eac0d0000 pid=3500 /usr/bin/sudo guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519 /tmp/sample.bin guuid=150c24ac-1600-0000-e079-ee3eac0d0000 pid=3500->guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519 execve guuid=e333cdb1-1600-0000-e079-ee3ec10d0000 pid=3521 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=e333cdb1-1600-0000-e079-ee3ec10d0000 pid=3521 clone guuid=18fbd1b1-1600-0000-e079-ee3ec20d0000 pid=3522 /usr/bin/base64 guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=18fbd1b1-1600-0000-e079-ee3ec20d0000 pid=3522 execve guuid=aeb3d6b1-1600-0000-e079-ee3ec30d0000 pid=3523 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=aeb3d6b1-1600-0000-e079-ee3ec30d0000 pid=3523 clone guuid=2b3074b2-1600-0000-e079-ee3ec60d0000 pid=3526 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=2b3074b2-1600-0000-e079-ee3ec60d0000 pid=3526 execve guuid=bb630cb3-1600-0000-e079-ee3ec90d0000 pid=3529 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=bb630cb3-1600-0000-e079-ee3ec90d0000 pid=3529 execve guuid=74c554b3-1600-0000-e079-ee3ecb0d0000 pid=3531 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=74c554b3-1600-0000-e079-ee3ecb0d0000 pid=3531 execve guuid=51c9bcb3-1600-0000-e079-ee3ecd0d0000 pid=3533 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=51c9bcb3-1600-0000-e079-ee3ecd0d0000 pid=3533 execve guuid=2e2724b4-1600-0000-e079-ee3ed10d0000 pid=3537 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=2e2724b4-1600-0000-e079-ee3ed10d0000 pid=3537 execve guuid=a023a2b4-1600-0000-e079-ee3ed20d0000 pid=3538 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=a023a2b4-1600-0000-e079-ee3ed20d0000 pid=3538 execve guuid=7c9f2ab5-1600-0000-e079-ee3ed60d0000 pid=3542 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=7c9f2ab5-1600-0000-e079-ee3ed60d0000 pid=3542 execve guuid=050c77b5-1600-0000-e079-ee3ed80d0000 pid=3544 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=050c77b5-1600-0000-e079-ee3ed80d0000 pid=3544 execve guuid=249ebfb5-1600-0000-e079-ee3eda0d0000 pid=3546 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=249ebfb5-1600-0000-e079-ee3eda0d0000 pid=3546 execve guuid=716707b6-1600-0000-e079-ee3edd0d0000 pid=3549 /usr/bin/mkdir guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=716707b6-1600-0000-e079-ee3edd0d0000 pid=3549 execve guuid=7e4d54b6-1600-0000-e079-ee3edf0d0000 pid=3551 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=7e4d54b6-1600-0000-e079-ee3edf0d0000 pid=3551 execve guuid=c3acc6b6-1600-0000-e079-ee3ee10d0000 pid=3553 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=c3acc6b6-1600-0000-e079-ee3ee10d0000 pid=3553 execve guuid=975b37b7-1600-0000-e079-ee3ee20d0000 pid=3554 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=975b37b7-1600-0000-e079-ee3ee20d0000 pid=3554 execve guuid=50cfb7b7-1600-0000-e079-ee3ee30d0000 pid=3555 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=50cfb7b7-1600-0000-e079-ee3ee30d0000 pid=3555 execve guuid=83883fb8-1600-0000-e079-ee3ee40d0000 pid=3556 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=83883fb8-1600-0000-e079-ee3ee40d0000 pid=3556 execve guuid=9195beb8-1600-0000-e079-ee3ee50d0000 pid=3557 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=9195beb8-1600-0000-e079-ee3ee50d0000 pid=3557 execve guuid=61344db9-1600-0000-e079-ee3ee60d0000 pid=3558 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=61344db9-1600-0000-e079-ee3ee60d0000 pid=3558 execve guuid=8152f0b9-1600-0000-e079-ee3ee70d0000 pid=3559 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=8152f0b9-1600-0000-e079-ee3ee70d0000 pid=3559 execve guuid=884e64ba-1600-0000-e079-ee3ee80d0000 pid=3560 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=884e64ba-1600-0000-e079-ee3ee80d0000 pid=3560 execve guuid=9f69dbba-1600-0000-e079-ee3ee90d0000 pid=3561 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=9f69dbba-1600-0000-e079-ee3ee90d0000 pid=3561 execve guuid=d05858bb-1600-0000-e079-ee3eea0d0000 pid=3562 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=d05858bb-1600-0000-e079-ee3eea0d0000 pid=3562 execve guuid=9693d6bb-1600-0000-e079-ee3eeb0d0000 pid=3563 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=9693d6bb-1600-0000-e079-ee3eeb0d0000 pid=3563 execve guuid=52ca57bc-1600-0000-e079-ee3eec0d0000 pid=3564 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=52ca57bc-1600-0000-e079-ee3eec0d0000 pid=3564 execve guuid=b92ce0bc-1600-0000-e079-ee3eed0d0000 pid=3565 /usr/bin/cp guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=b92ce0bc-1600-0000-e079-ee3eed0d0000 pid=3565 execve guuid=e8058fbd-1600-0000-e079-ee3eee0d0000 pid=3566 /usr/bin/touch guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=e8058fbd-1600-0000-e079-ee3eee0d0000 pid=3566 execve guuid=b16605be-1600-0000-e079-ee3eef0d0000 pid=3567 /usr/bin/chmod guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=b16605be-1600-0000-e079-ee3eef0d0000 pid=3567 execve guuid=d2da68be-1600-0000-e079-ee3ef00d0000 pid=3568 /usr/bin/chmod guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=d2da68be-1600-0000-e079-ee3ef00d0000 pid=3568 execve guuid=3588d4be-1600-0000-e079-ee3ef10d0000 pid=3569 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=3588d4be-1600-0000-e079-ee3ef10d0000 pid=3569 execve guuid=743c67bf-1600-0000-e079-ee3ef20d0000 pid=3570 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=743c67bf-1600-0000-e079-ee3ef20d0000 pid=3570 execve guuid=ef20d4bf-1600-0000-e079-ee3ef30d0000 pid=3571 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=ef20d4bf-1600-0000-e079-ee3ef30d0000 pid=3571 execve guuid=6b8949c0-1600-0000-e079-ee3ef40d0000 pid=3572 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=6b8949c0-1600-0000-e079-ee3ef40d0000 pid=3572 execve guuid=90f2a1c0-1600-0000-e079-ee3ef80d0000 pid=3576 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=90f2a1c0-1600-0000-e079-ee3ef80d0000 pid=3576 execve guuid=d875ffc0-1600-0000-e079-ee3efa0d0000 pid=3578 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=d875ffc0-1600-0000-e079-ee3efa0d0000 pid=3578 execve guuid=b03b64c1-1600-0000-e079-ee3efd0d0000 pid=3581 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=b03b64c1-1600-0000-e079-ee3efd0d0000 pid=3581 execve guuid=b592b5c1-1600-0000-e079-ee3efe0d0000 pid=3582 /usr/bin/chattr guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=b592b5c1-1600-0000-e079-ee3efe0d0000 pid=3582 execve guuid=bafa4ec2-1600-0000-e079-ee3e010e0000 pid=3585 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=bafa4ec2-1600-0000-e079-ee3e010e0000 pid=3585 clone guuid=4ee956c2-1600-0000-e079-ee3e020e0000 pid=3586 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=4ee956c2-1600-0000-e079-ee3e020e0000 pid=3586 clone guuid=84efaec2-1600-0000-e079-ee3e050e0000 pid=3589 /usr/bin/curl net send-data guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=84efaec2-1600-0000-e079-ee3e050e0000 pid=3589 execve guuid=ef3bbbc2-1600-0000-e079-ee3e060e0000 pid=3590 /usr/bin/dash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=ef3bbbc2-1600-0000-e079-ee3e060e0000 pid=3590 execve guuid=f3503ecf-1600-0000-e079-ee3e1b0e0000 pid=3611 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=f3503ecf-1600-0000-e079-ee3e1b0e0000 pid=3611 clone guuid=891946cf-1600-0000-e079-ee3e1c0e0000 pid=3612 /usr/bin/base64 guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=891946cf-1600-0000-e079-ee3e1c0e0000 pid=3612 execve guuid=d75a4fcf-1600-0000-e079-ee3e1e0e0000 pid=3614 /usr/bin/tee write-file guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=d75a4fcf-1600-0000-e079-ee3e1e0e0000 pid=3614 execve guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616 execve guuid=90faa9d7-1600-0000-e079-ee3e520e0000 pid=3666 /usr/bin/bash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=90faa9d7-1600-0000-e079-ee3e520e0000 pid=3666 execve guuid=3b4a0ed8-1600-0000-e079-ee3e530e0000 pid=3667 /usr/bin/rm delete-file guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=3b4a0ed8-1600-0000-e079-ee3e530e0000 pid=3667 execve guuid=047894d8-1600-0000-e079-ee3e570e0000 pid=3671 /usr/bin/rm guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=047894d8-1600-0000-e079-ee3e570e0000 pid=3671 execve guuid=1744d8d8-1600-0000-e079-ee3e590e0000 pid=3673 /usr/bin/curl net send-data guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=1744d8d8-1600-0000-e079-ee3e590e0000 pid=3673 execve guuid=f60fded8-1600-0000-e079-ee3e5a0e0000 pid=3674 /usr/bin/dash guuid=c0a87ab1-1600-0000-e079-ee3ebf0d0000 pid=3519->guuid=f60fded8-1600-0000-e079-ee3e5a0e0000 pid=3674 execve 124ee36c-bdbd-5d46-bbb1-b2cd81367f04 160.119.69.4:80 guuid=84efaec2-1600-0000-e079-ee3e050e0000 pid=3589->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B guuid=e4687cd0-1600-0000-e079-ee3e240e0000 pid=3620 /usr/bin/bash guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=e4687cd0-1600-0000-e079-ee3e240e0000 pid=3620 clone guuid=3aad88d0-1600-0000-e079-ee3e250e0000 pid=3621 /usr/bin/bash guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=3aad88d0-1600-0000-e079-ee3e250e0000 pid=3621 clone guuid=6f1a38d1-1600-0000-e079-ee3e280e0000 pid=3624 /usr/bin/ls guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=6f1a38d1-1600-0000-e079-ee3e280e0000 pid=3624 execve guuid=7337c6d1-1600-0000-e079-ee3e2c0e0000 pid=3628 /usr/bin/cat guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=7337c6d1-1600-0000-e079-ee3e2c0e0000 pid=3628 execve guuid=08563fd2-1600-0000-e079-ee3e2e0e0000 pid=3630 /usr/bin/ls guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=08563fd2-1600-0000-e079-ee3e2e0e0000 pid=3630 execve guuid=1aeae3d2-1600-0000-e079-ee3e320e0000 pid=3634 /usr/bin/mkdir guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=1aeae3d2-1600-0000-e079-ee3e320e0000 pid=3634 execve guuid=b80d6dd3-1600-0000-e079-ee3e360e0000 pid=3638 /usr/bin/mv guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=b80d6dd3-1600-0000-e079-ee3e360e0000 pid=3638 execve guuid=5b0902d4-1600-0000-e079-ee3e380e0000 pid=3640 /usr/bin/bash guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=5b0902d4-1600-0000-e079-ee3e380e0000 pid=3640 clone guuid=95260ad4-1600-0000-e079-ee3e390e0000 pid=3641 /usr/bin/base64 write-file guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=95260ad4-1600-0000-e079-ee3e390e0000 pid=3641 execve guuid=a9937ed4-1600-0000-e079-ee3e3d0e0000 pid=3645 /usr/bin/rm delete-file guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=a9937ed4-1600-0000-e079-ee3e3d0e0000 pid=3645 execve guuid=9086cdd4-1600-0000-e079-ee3e3f0e0000 pid=3647 /usr/bin/mv guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=9086cdd4-1600-0000-e079-ee3e3f0e0000 pid=3647 execve guuid=7aee44d5-1600-0000-e079-ee3e430e0000 pid=3651 /usr/bin/ls guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=7aee44d5-1600-0000-e079-ee3e430e0000 pid=3651 execve guuid=f62db8d5-1600-0000-e079-ee3e440e0000 pid=3652 /usr/bin/bash guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=f62db8d5-1600-0000-e079-ee3e440e0000 pid=3652 clone guuid=cbcbc1d5-1600-0000-e079-ee3e460e0000 pid=3654 /usr/bin/base64 write-file guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=cbcbc1d5-1600-0000-e079-ee3e460e0000 pid=3654 execve guuid=c4f418d6-1600-0000-e079-ee3e470e0000 pid=3655 /usr/bin/ls guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=c4f418d6-1600-0000-e079-ee3e470e0000 pid=3655 execve guuid=ddf4b3d6-1600-0000-e079-ee3e4c0e0000 pid=3660 /usr/bin/cat guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=ddf4b3d6-1600-0000-e079-ee3e4c0e0000 pid=3660 execve guuid=764012d7-1600-0000-e079-ee3e500e0000 pid=3664 /usr/bin/ls guuid=3a25f8cf-1600-0000-e079-ee3e200e0000 pid=3616->guuid=764012d7-1600-0000-e079-ee3e500e0000 pid=3664 execve guuid=1744d8d8-1600-0000-e079-ee3e590e0000 pid=3673->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B
Score:
82%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/d52cef8cda577da06b02326ea0cb6b6df55b6149018c2e091843c43414eacd71
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d52cef8cda577da06b02326ea0cb6b6df55b6149018c2e091843c43414eacd71/
Threat name:
Linux.Backdoor.WebShell
Create hunting rule
Status:
Malicious
First seen:
2026-08-15 08:57:32 UTC
File Type:
Text (Shell)
AV detection:
16 of 36 (44.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2uwo7dg2k562a2ycgjxkbs3lnx2vwykjaggc4ciyipcdifhkzvyq._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
antivm defense_evasion discovery linux
Link:
https://tria.ge/reports/260815-kv8npaeh64/
Behaviour
Reads runtime system information
Writes file to tmp directory
Deobfuscate/Decode Files or Information
Checks CPU configuration
File and Directory Permissions Modification
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:SUSP_LNX_Base64_Exec_Apr24
Create hunting rule
Author:Christian Burkard
Description:Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Reference:Internal Research

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh d52cef8cda577da06b02326ea0cb6b6df55b6149018c2e091843c43414eacd71

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3884409/
  
Delivery method
Distributed via web download

Comments