MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321
SHA3-384 hash:	d656b1ab255a789042d46382405e6104817bb737a334aaa8ec43df85dd340a2db31d2fbd56b9927ddbf1979a030fa200
SHA1 hash:	f66d2384b237d920cefd56bb90ec984a4707ddc6
MD5 hash:	9f1c33e4029877b83827b8b13490cf6f
humanhash:	sweet-robert-item-bacon
File name:	5c85i3vbf.vdf
Download:	download sample
File size:	3'415'715 bytes
First seen:	2025-01-16 15:21:46 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	6144:SAw5wKww/OecRngtWnTfcuwYw8wLwQw4Fw4Zw42w4dw4Cw4bw4Tw4Hw4dw455w4+:StWA/DaX2pBVXFt6l5j
TLSH	T112F540DBB79807FC56584ADD8207348B62D1C13B1EBF128CA5E2844BB92FE137625E74
Magika	powershell
Reporter	aachum
Tags:	ps1 vdf

iamaachum

https://e1.foiloverturnarrival.shop/5c85i3vbf.vdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

194

Origin country :

ES

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=678924db4487910100df9f6b

Tags:

ransomware html

Hybrid Analysis PowerShell/Agent.CCZ trojan

Verdict:

Malicious

Labled as:

PowerShell/Agent.CCZ trojan

Link:

https://www.hybrid-analysis.com/sample/dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321/

ReversingLabs TitaniumCloud Script-PowerShell.Trojan.Heuristic

Threat name:

Script-PowerShell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-14 21:38:17 UTC

File Type:

Text

AV detection:

6 of 24 (25.00%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=37nnr4qmt6aoxyegewg6zwna4fsq4p4vj7mwax2shu7zdv7u2mqq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/dfdad8f20c9f80ebe086258decd9a0e1650e3f954fd9605f523d3f91d7f4d321