MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038
SHA3-384 hash:	7fb0824db06a5b60745e467ffa2534a205afd58407c53e17b163a4c6bada83356666ffaa7d96b788bb305541d0a040e2
SHA1 hash:	5094e70fae52b087804a5a0dc654cf56ea3fe5c4
MD5 hash:	d5bd6fb40e3705220c6e8d62dac0a8d0
humanhash:	network-yankee-hamper-golf
File name:	o.xml
Download:	download sample
File size:	667 bytes
First seen:	2026-03-11 01:52:36 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	12:FzY8id/7JAC7akxGWi2jX0KTkkjtij1Qjhpnv:FzY8k1/sWi2jkwt01Cr
TLSH	T1100146DCB1BC8FA10A9DC68AF6B051048482D0C7E1F657C5F34E0820AF00F8D3A6368D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

69

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-BGU.19963626.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b0cfb6e5dc8e2b2c3250e7

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

opendir

Link:

https://www.filescan.io/uploads/69b1111d97feb4afd67d7295/reports/b98414e6-ece1-408b-b3af-c5c7f0ac6aa9/overview

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038

ReversingLabs TitaniumCloud Win32.Trojan.Etset

Threat name:

Win32.Trojan.Etset

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-11 02:10:14 UTC

File Type:

Text

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=amf7rbzeadytxk2grvhdfnltezki57i4odayuwcgo7qmk3juea4a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/030bf8872400f13bab468d4e32b57326548efd1c70c18a584677e0c56d342038