- First seen
- Last seen
THREAT SIGNALBenign
VirusSign assessment
Indicator overview
INDICATOR PROFILEThe reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
- SHA256
de33640a0eb4eaa5ecd485dccb29eab8e5af8268c84edd0794b4c6a4acae7607- SHA1
0b68d0e762b6211cea97445035faa6301a748161- MD5
b0eef6e606ae9781eb4dbbfadd909482- Filename
- de33640a_gc_thresh3.bin
- File type
- text
- MIME
- text/plain
- File size
- 6
- SSDEEP
3:QYv:QC- First seen
- 2013-06-01T00:13:55Z
- Last seen
- 2013-06-05T04:47:05Z
Connected context
Key findings
OBSERVED EVIDENCEAnalysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
5 related indicators are shown across 1 relationship group(s). Additional relationship intelligence is available through API and data access.
Analysis signals
OBSERVEDEngine detections0%
Relationship context5 visible
Intelligence freshnessHistorical
Expand a connection to run an additional public query. This page allows up to 3 expansions; each counts toward your query limit.
Graph filters
Saved investigations
Compare when indicators were first seen, last seen and observed. Switch to Lifecycle to connect events for the same IOC.
Commonalities
RELATIONSHIP CONSTELLATION
No observations in this view
Available evidence appears in the other investigation lenses.
SELECT A NODE TO EXPLORE
FILEDOMAINIPURL
Visible connections
Related intelligence
Pivot across connected files and infrastructure with analysis signals and supporting context.
Parent files
Files that may have delivered, loaded, or executed this indicator.
5shown
0%
shell
32385 bytes
drops
Filename
7004ff54_dbginfo.sh.bin
File type
shell
MIME
text/plain
Size
32385
SHA1
751806f89aba8661e783b5bf22d2dcc4ca995f9f
0%
shell
34547 bytes
drops
Filename
48552b11_dbginfo.sh.bin
File type
shell
MIME
text/plain
Size
34547
SHA1
92067cb10857e8fd0593be3950800d6ab325ee42
0%
shell
21633 bytes
drops
Filename
6d7a2658_wgm.sh.bin
File type
shell
MIME
text/plain
Size
21633
SHA1
d8518a6f7f808304adab1085f0d1f18fda600be5
0%
zip
147030887 bytes
drops
Filename
dd486623_shady.zip.bin
File type
zip
MIME
application/zip
Size
147030887
SHA1
162a8b1d03cfd5ffe3c730676c5efa5214872f40
20%
high
shell
2045 bytes
drops
Filename
dfb2327c_malware.sh.bin
Family
pomedaj
Type
downloader
File type
shell
MIME
text/plain
Analysis details
textknownsrc
Freshness: Historical · Last seen 4909 days ago.
- Detection rate
- 0%
- detection
- 0 · Engine detection rate; color may also reflect VirusSign confidence.
Overview
- SHA256
de33640a0eb4eaa5ecd485dccb29eab8e5af8268c84edd0794b4c6a4acae7607- SHA1
0b68d0e762b6211cea97445035faa6301a748161- MD5
b0eef6e606ae9781eb4dbbfadd909482- Filename
- de33640a_gc_thresh3.bin
- File type
- text
- MIME
- text/plain
- File size
- 6
- SSDEEP
3:QYv:QC- First seen
- 2013-06-01T00:13:55Z
- Last seen
- 2013-06-05T04:47:05Z
Key findings
A focused interpretation of the evidence, relationships and observation history that matter most.
Analysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
5 related indicators are shown across 1 relationship group(s). Additional relationship intelligence is available through API and data access.
Observation timeline
6 timestamped observations are arranged from 2013-06-01 to 2025-11-16. These are observation or metadata times, not execution order.
Intelligence freshness
Last seen 4909 days ago. Revalidate volatile infrastructure before enforcement.
Why this verdict
Review the reported detections, analysis confidence and supporting context.
The reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
1 relationship group(s) provide pivot and infrastructure context.
Last seen 4909 days ago.
Signals reflect the intelligence returned in this report. Missing values mean not reported, not zero. Related indicators are investigation leads, not proof of shared malicious activity.
File profile
summarySelected file intelligence summary.
- Filename
- de33640a_gc_thresh3.bin
- File type
- text
- MIME
- text/plain
- Size
- 6