MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfe1cf57919c37322958c9c27e3f13e8227d20e62d7f74e8f49f5d54bb3c2685. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dfe1cf57919c37322958c9c27e3f13e8227d20e62d7f74e8f49f5d54bb3c2685
SHA3-384 hash:	f6bdaf7590ab18953a467b42dfb8e5b800aebf82f6b4a6a4898a3639952060ae828af3cd957f810b495351a6c2e16e81
SHA1 hash:	7deed337a2063d0d7913fdccb7a1270a4a630974
MD5 hash:	078e92acde48afde49d02ad4cba98f9a
humanhash:	pennsylvania-saturn-grey-fish
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'580 bytes
First seen:	2025-02-10 16:41:30 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:jovLJEB7vdbJhMcvRJmLv5JXN60ibf46I+96jN/BbcMmfJ6o4Y9:jovLJEB7vdbJacvRJmLv5JXN60ibf5IO
TLSH	T13E3130C004D52F7ECCC496267766503E902868C9AF371ED8D6CB58D4AA45B93F830D8C
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67aa2ca4f667f46cd182dc20linux22vpnfull_triage

Tags:

hype sage

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

79%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dfe1cf57919c37322958c9c27e3f13e8227d20e62d7f74e8f49f5d54bb3c2685

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dfe1cf57919c37322958c9c27e3f13e8227d20e62d7f74e8f49f5d54bb3c2685/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-10 16:42:23 UTC

File Type:

Text (Shell)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=37q46v4rtq3tekkyzhbh4pyt5arh2ihgfv7xj2hut5ovjoz4e2cq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion linux

Link:

https://tria.ge/reports/250210-t7r15sxnfl/

Behaviour

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.29

Link:

https://yomi.yoroi.company/submissions/dfe1cf57919c37322958c9c27e3f13e8227d20e62d7f74e8f49f5d54bb3c2685