MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84
SHA3-384 hash:	e38a14f860254bbc194eb60948241a2d5aed5b39c28619a64568d3941bfc2b8927de0ca529d7737e9bb27ae9965b74c1
SHA1 hash:	6feb326eaacbf7e9fe38eb4d37a5919166253966
MD5 hash:	f4dcac746cc9f99727ec425284bc28da
humanhash:	helium-east-helium-green
File name:	port-check.ps1
Download:	download sample
File size:	1'085 bytes
First seen:	2025-07-17 05:50:40 UTC
Last seen:	Never
File type:	ps1
MIME type:	text/plain
ssdeep	12:pSYfXm4MGiREvT/LF0zEPiThsIZWB0WsDVm6xhwEMDlAhMjU9RaC8:OGbzF0zVsM2sDVzVQIQLC8
TLSH	T16711C71071078123A6F3233B688AA3D8EF12912B6467040935CCC2CC6FB6D1491BCE1E
Magika	powershell
Reporter	abuse_ch
Tags:	ps1

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

33

Origin country :

SE

Vendor Threat Intelligence

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68788f5b84b37dd61eef1539

Tags:

malware

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68788f5d8a7d628a81b3b0ac/reports/50f476ec-88d3-4fa4-96c2-b5f6a944f9c8/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

25 / 100

Link:

https://www.joesandbox.com/analysis/1738557

Signature

Joe Sandbox ML detected suspicious sample

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-01-11 07:02:17 UTC

File Type:

Text (PowerShell)

AV detection:

4 of 23 (17.39%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5aqhx423l2bjxj77vu6wlslqftqfqlvsrvqaxhxtv4ldg5ic3sca._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/250717-gka3wsvkt2/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Command and Scripting Interpreter: PowerShell

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.80

Link:

https://yomi.yoroi.company/submissions/e8207bf35b5e829ba7ffad3d65c9702ce0582eb28d600b9ef3af16337502dc84