MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93
SHA3-384 hash:	aee91a82ac186001b3a2621eda7ab40e2446de1b37ec30011c6429cc043cd64e861031127f6b07d7e70ef625c8e04f6c
SHA1 hash:	51ed2a9e85bbad7aab18415cfa9e21758d8d3c7c
MD5 hash:	38560a3ed34a92a9105f2977bb755cff
humanhash:	glucose-finch-south-bulldog
File name:	o.xml
Download:	download sample
File size:	676 bytes
First seen:	2026-08-11 14:43:40 UTC
Last seen:	2026-08-12 13:54:14 UTC
File type:
MIME type:	text/plain
ssdeep	12:FH8ioNJAC7ukxGWi2jU30+0K5+A+BjuDjfypZfyNp5ZhG+E6:FH8j/wWi2jzZuDDyppyNpn
TLSH	T183014C5CD1E4DA9109B9C987F3B09585C49094C7B1F567E6F68E1A23AF60C8E346330D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

57

# of downloads :

7

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2650.24874.16141.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

downloader opendir

Link:

https://www.filescan.io/uploads/6a7b76a8afc4f961a0ec6282/reports/9740dea8-ed66-42d9-8576-863ecb841075/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2026-08-11T12:50:00Z UTC

Last seen:

2026-08-12T04:35:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script.Downloader.Heuristic

Threat name:

Script.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-11 16:33:42 UTC

File Type:

Text

AV detection:

8 of 24 (33.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=asdgttnsh57idu5gg24adjo3ygfubag6d3sy4l3vx622bepjf6jq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/048669cdb23f7e81d3a636b801a5dbc18b4080de1ee58e2f75bfb5a091e92f93