MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2
SHA3-384 hash:	7070fc40cc033e8ef5c50a2b2a393e892cc5402ecaf8f66f25fe70926fff1036da5f15c6af101b644d6dbdbff9534664
SHA1 hash:	21b4edd318275c8a9c8015d98cbc2fc8396da2c5
MD5 hash:	c47ce3d5cfb8b634e51b3364b308cad5
humanhash:	steak-coffee-aspen-fish
File name:	f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2
Download:	download sample
File size:	2'330'199 bytes
First seen:	2026-10-07 09:32:21 UTC
Last seen:	Never
File type:	php
MIME type:	text/x-php
ssdeep	24576:1F9IPsxI9qxqPJWvKCuDH0hQfbrvxnLFPEjPq22puXl98POluK8njC4k4FquUv0G:1/R
TLSH	T14FB59FB8B5482C97173B12BBCF8A9E99136609739596F8CA705D62C20B5337CDF66C0C
Magika	txt
Reporter	Anonymous
Tags:	php

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

68

Origin country :

EG

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

YARA.md5_71a7c769e644d8cf3cf32419239212c7.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

backdoor obfuscated

Link:

https://www.filescan.io/uploads/6ac611e4aaf71f9bc0084a96/reports/5d91db6e-147e-426f-95df-6857f14b3f5b/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

js

Link:

https://opentip.kaspersky.com/f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2/results?tab=lookup

Nucleon Malprob Malware

Score:

91%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-11 04:32:03 UTC

File Type:

Text (PHP)

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6zbj6g5u5ekk3266kqc44msf7irfapbkax5yqhrtj73ctvi4t2za._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2