MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e
SHA3-384 hash:	cc5c4da51a4cf00cc9459e2c5b09f9ac0d0042fa341c3af3c79a99f12aa760440476a92e09d0c28359253b1edb66c92d
SHA1 hash:	a54b10ebf4925fd4ffd7c2c74e1f9efbadea7a84
MD5 hash:	f6b937cedb5e8e4f8b39df8d6f470010
humanhash:	eighteen-mississippi-sad-robin
File name:	ipc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	788 bytes
First seen:	2025-12-21 15:14:08 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:L6V1OWTdyc6Vb+g2+yc6Vquyc6VQa6RcTyc6VeOBdyc6Vc5Eyc6VcODyMyc6V1mg:eO/vUMD36XMOBEmd/2FjDCMD3DH
TLSH	T13001868F1222EE15C02CDFB835A76881B160CAE17EA41A1D6FD9C577D4C46B0731EEB6
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

39

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6948134384afa5547b5b6eb7/reports/5c3fc7f6-9e7b-4706-9108-a57e4c31edf0/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-21T12:37:00Z UTC

Last seen:

2025-12-22T17:04:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/be4016aa-97e9-4cf6-b8e7-c2a44935576c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-21 15:33:21 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3l6h43ccad43h6zk6tj2rrhr43azscmotkc7vbhxu7mc2dezwu7a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251223-lmmxpasjhy/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/dafc7e6c4200f9b3fb2af4d3a8c4f1e6c199098e9a85fa84f7a7d82d0c99b53e