MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc483e17c69e218cda5cbbd7a342b10707de8fc27daabad64ace825705998f08. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dc483e17c69e218cda5cbbd7a342b10707de8fc27daabad64ace825705998f08
SHA3-384 hash:	d46ad0f339df36087233376b1ab16a6df44106f24277d2ea793136fbd66d6bebd6c4dc0239dd7b2eda4ab8f27bc82936
SHA1 hash:	9dcc3f09029ff3e160e0fb52800434a9ee4d3284
MD5 hash:	ad8ede7a27887187bf6bdae00c0c8081
humanhash:	fix-rugby-dakota-florida
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	859 bytes
First seen:	2025-03-06 18:16:50 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3DMTtVWAbNWA3eJTW4DDWV4ZJn20tThyuR:VMTPHbNH3eJTW4nXLnZtThye
TLSH	T156113C8E52A5F2415D6CCD1D7067C10DB761D2CDF86D5E40F29CA9F0EAC41047878FA6
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

101

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c9e7a8c8d04e92a4bf7055linux22vpnfull_triage

Tags:

agent hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67c9e6ace95d0f9029e53bd9/reports/c445ad4d-798c-4905-a1ae-708ce70efd85/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/dc483e17c69e218cda5cbbd7a342b10707de8fc27daabad64ace825705998f08

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dc483e17c69e218cda5cbbd7a342b10707de8fc27daabad64ace825705998f08/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-06 18:17:18 UTC

File Type:

Text (Makefile)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3red4f6gtyqyzws4xpl2gqvra4d55d6cpwvlvvskz2bfobmzr4ea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250306-ww4lxavscs/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/dc483e17c69e218cda5cbbd7a342b10707de8fc27daabad64ace825705998f08