MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 03d28e1ea53be7c0dca0bdfb24279824d49136d435ebe519cd4c4d6c8f13699a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	03d28e1ea53be7c0dca0bdfb24279824d49136d435ebe519cd4c4d6c8f13699a
SHA3-384 hash:	411d94c1bcc8bf76864b1d7b2631283feaf045d82200fbda5f9db76b4022ac26ea4c95b6c75c422b77974b59fe95b9e9
SHA1 hash:	ca94719aa048e4d6a0e87544411e72066c03f220
MD5 hash:	54135b7f9acfd5024c88ccc5429cf881
humanhash:	wisconsin-maryland-maryland-south
File name:	curl.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	979 bytes
First seen:	2025-06-30 17:11:49 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3+InIyIRGNINTInKLIpIwIG8I3hIaNI7I6f:/IREnvCnGj3qaWc6f
TLSH	T146110DED005E7446AB3D9E31F03D6849E48086E035A4D781F04ED4B6F1A9A2B4336B93
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.32158.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6862c57037c343677947e0d2linux22vpnfull_triage

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6862c57b7423ff017c37793f/reports/9a3abf75-af2d-4e03-8a6d-061387cfef4b/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/247e196b-db41-4323-ab6d-4a16a7afed85

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/03d28e1ea53be7c0dca0bdfb24279824d49136d435ebe519cd4c4d6c8f13699a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/03d28e1ea53be7c0dca0bdfb24279824d49136d435ebe519cd4c4d6c8f13699a/

ReversingLabs TitaniumCloud Document-HTML.Browser.Heuristic

Threat name:

Document-HTML.Browser.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-30 17:12:15 UTC

File Type:

Text (Shell)

AV detection:

4 of 36 (11.11%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=apji4hvfhpt4bxfaxx5sij4yetkjcnwugxv6kgonjrgwzdytngna._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250630-vqxeza1wbw/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/03d28e1ea53be7c0dca0bdfb24279824d49136d435ebe519cd4c4d6c8f13699a