MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145
SHA3-384 hash:	a16f031a9969319f877acdb95fac12770225d8849c506b549c943e58e14d7b00172db642559db53f6ab40d3fad2069b0
SHA1 hash:	d823c89311a2d34fedf29a8fd72b6df0375b3646
MD5 hash:	8c1b03a6197614eeeb38e25f24e910b7
humanhash:	dakota-washington-paris-pennsylvania
File name:	file_2n4kbwex.dbr.txt
Download:	download sample
File size:	13'909 bytes
First seen:	2024-07-03 10:22:32 UTC
Last seen:	2024-07-03 10:24:57 UTC
File type:	unknown
MIME type:	text/plain
ssdeep	384:FUQMMF22kir/WU/noMdVCOMmbHJBH1U3JBH1UKKCK3dUccqRx/p9Spfd+mohNUcb:FpVr4SZtLKgbAG2e3jltnxwVGHM/y
TLSH	T13752F886841394605BDC661286072941BCC433B7C628D506FAEAEEA4F7F7C16F0ADDD7
Reporter	NDA0E
Tags:	script

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

86

Origin country :

NL

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.VB.Trojan.Valyria.8799.12031.16615.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6685269a6b8dba248b48c4d4/reports/02926d12-a532-4c54-aa9e-de137f0a4904/overview

Hybrid Analysis Valyria

Verdict:

Malicious

Labled as:

Valyria

Link:

https://www.hybrid-analysis.com/sample/dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145/

ReversingLabs TitaniumCloud Script-WScript.Trojan.Valyria

Threat name:

Script-WScript.Trojan.Valyria

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-07-03 10:23:06 UTC

File Type:

Text (VBS)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=37e4hjtkm3fjucwulvryrjskou7eanu6c5hhmvjmibinwppa2fcq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/dfc9c3a66a66ca9a0ad45d6388a64a753e40369e174e76552c4050db3de0d145