MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7
SHA3-384 hash:	6b17d1215d495032d04d98d6206bcf95366ee1b967cfc4263d3e4cae0db16cc54d06e1b2fd1cc3fb8c928c07f6b81786
SHA1 hash:	18b98030063e33dd0453d44f699e0aea2bc8b035
MD5 hash:	60caafe1923961497c1f112ffc33cc97
humanhash:	bakerloo-march-red-ohio
File name:	dl19
Download:	download sample
Signature	DDoSAgent Alert Create hunting rule
File size:	5'240 bytes
First seen:	2025-04-03 14:02:32 UTC
Last seen:	2025-04-03 15:17:20 UTC
File type:	sh
MIME type:	text/plain
ssdeep	96:SFqzHstfxFBYdRXs7uAnLw2A2NEPjYCgf+vkim6XS2bf9x:qDVzCO+sI
TLSH	T106B14ACE02D551205442B70F7AE06F848C9887D1ECB74F9EFC99CEA524609A8F579F1D
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

37

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67eeb4f1855e5ec5240d11cblinux22vpnfull_triage

Tags:

downloader packed agent

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67ee95200eb02f7be1398308/reports/bef234e9-ae75-44d3-99f8-d860a5bfc5d9/overview

Hybrid Analysis Trojan.Script.Downloader

Verdict:

Malicious

Labled as:

Trojan.Script.Downloader

Link:

https://www.hybrid-analysis.com/sample/ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5xsi5mhyhrn3t3sioriavcgjjkbxzrmcgj6ofldxyt3rkrapd6tq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250403-tlylssywft/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ede48eb0f83c5bb9ee4874500a88c94a837cc582327ce2ac77c4f715440f1fa7