MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 db7dee0d9019fae426f6779337d2104531d2dfc239b0fe98731d3f1ad2b03aa7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	db7dee0d9019fae426f6779337d2104531d2dfc239b0fe98731d3f1ad2b03aa7
SHA3-384 hash:	c5ace4eb985c3577db29c023ac24274115ae133e87c1cefcc51787aa8f1c14fc1ff15b0f356714ab1ec6a16f1b56c8ce
SHA1 hash:	55be0e85884056e4989f059190a9f05d4cf559e3
MD5 hash:	4aa40d824216d9ebe0107aada9e2a3fa
humanhash:	spring-mars-bakerloo-purple
File name:	tftp.sh
Download:	download sample
File size:	478 bytes
First seen:	2025-05-07 03:59:30 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:L6Fjmjr/v9t6Fjzup/vjR16FvuVPh/vt316FveLXV/vh5P6FvCRH1/p/vFLKil6c:rrn9FpnbVPhntdXVnh5lhPnFLKiVnNei
TLSH	T11EF0B4F2223043B64110790AA059D4F0B8F3525B4E33CE69277935F9E63483CBC20038
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

99

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=681adb9f8474cc94a4e4a071linux22vpnfull_triage

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/681adad1c7418694c8a68c19/reports/5c2d6fa7-a0d4-4a73-8618-ab4b9f4b8de4/overview

Nucleon Malprob Malware

Score:

79%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/db7dee0d9019fae426f6779337d2104531d2dfc239b0fe98731d3f1ad2b03aa7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/db7dee0d9019fae426f6779337d2104531d2dfc239b0fe98731d3f1ad2b03aa7/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3n664dmqdh5oijxwo6jtpuqqiuy5fx6chgyp5gdtdu7rvuvqhktq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250507-ekqggaxtcy/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/db7dee0d9019fae426f6779337d2104531d2dfc239b0fe98731d3f1ad2b03aa7