MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9
SHA3-384 hash: 147ba34cceca0c8a903b1e5159b67443b1d5717909357fab8e022c250de53a49509f1b67272f7771d4a770ee08c53a91
SHA1 hash: a39331edfdd51de1f02256ae228324b69eff8e43
MD5 hash: 3bf0792c9a99ae101c0d3643ff37c2ce
humanhash: florida-oxygen-winner-virginia
File name:1SMAR30_UK-Vioooooooooooooooo-obf.py
Download: download sample
File size:1'306'987 bytes
First seen:2026-03-31 17:54:34 UTC
Last seen:Never
File type:
MIME type:application/x-bytecode.python
ssdeep 384:WwSpMezwws0elPVGRjVD/bJoKXBDzcazje7dkj2MuSru68F:WrpMezwws0erGtlbp+
TLSH T1EB5531A25C8D6C6CA659CD078315E92B095B78D4B290FF5237D1EB61AF433C0DB072BA
Magika pythonbytecode
Reporter kirkderp
Tags:py

Intelligence

File Origin
# of uploads :
1
# of downloads :
20
Origin country :
US US
Vendor Threat Intelligence
Gathering data
Detection(s):
SecuriteInfo.com.Python.Agent-YF.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=69cc0f5d6363ca5d27f04ace
Tags:
n/a
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/69cc0f442346b9da57b434c9/reports/4e35b910-04b6-4a26-9e5b-fefbfd4fa04d/overview
Verdict:
Malicious
Labled as:
Trojan/Python.Kramer
Link:
https://www.hybrid-analysis.com/sample/fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9
Verdict:
Malicious
File Type:
pybcode
First seen:
2026-04-01T08:05:00Z UTC
Last seen:
2026-04-01T08:08:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan.Python.Kramer.gen
Link:
https://opentip.kaspersky.com/fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9/results?tab=lookup
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9/
Verdict:
Malicious
Threat:
Trojan.Python.Kramer
Link:
https://tip.neiki.dev/file/fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9
Threat name:
Script-Python.PUA.Multiverze
Create hunting rule
Status:
Malicious
First seen:
2026-03-31 17:55:30 UTC
File Type:
Binary
AV detection:
11 of 24 (45.83%)
Threat level:
  1/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=7ogtykma3wm63tiunszogq4zssz5t3rahvf3nexc5k6w7mh2zguq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260331-wv4khscw7q/
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/fb8d3c2980dd99edcd146cb2e3439994b3d9ee203d4bb692e2eabd6fb0fac9a9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments