MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca
SHA3-384 hash:	d6f943fa7e1b23b72f287c7c88f2600081eda2f5cf5c747b04a574798fa4bafc6fdc1556c6937c535d2b24271878d08d
SHA1 hash:	6376fd79a9647680f011f34ee0dfcb3a572c6340
MD5 hash:	f51402cce5997e4b5c2650c85623596a
humanhash:	chicken-river-steak-hydrogen
File name:	.shell
Download:	download sample
Signature	Xorbot Alert Create hunting rule
File size:	208 bytes
First seen:	2025-05-28 18:26:32 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:QnQzanFCKl2X4HMiDvdLeHKWlQvdLeHKWxqR3vdLeHKWGSLM9Kd:lOnFflHM4AliAMAlM9Kd
TLSH	T15DD012C9E95179B0D8C6CDF925E2F50067604595DDC20F35EEC8F89A44C9F0C304DE41
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

60

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6838003c668438e362e7f6bdlinux22vpnfull_triage

Tags:

trojan agent virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/6919a0aea4cfab8e885c85a1/reports/49283df2-80e8-4d5c-9f6a-60a364251efa/overview

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca/

ReversingLabs TitaniumCloud Script.Trojan.Boxter

Threat name:

Script.Trojan.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-29 02:07:00 UTC

File Type:

Text (Shell)

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=allykzi6qtvwfrvnooemahcxukclj6mrismh4lt34f5w6kt3oxfa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/02d785651e84eb62c6ad7388c01c57a284b4f99144987e2e7be17b6f2a7b75ca