MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda
SHA3-384 hash:	f5adcbec3a4324b4fd70c1a758fe77640cdc9cb7e11e6e78d612144b4deddd451acf698e46f76d612528ccc5748de12d
SHA1 hash:	fc877cbc109ce4dd0c91882a3b50a5a5c4897002
MD5 hash:	9ba90db7f93bde56c4fb9015f442b71f
humanhash:	mockingbird-jupiter-west-robert
File name:	0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda.sh
Download:	download sample
File size:	13'074 bytes
First seen:	2026-09-11 09:09:57 UTC
Last seen:	2026-09-12 05:36:13 UTC
File type:	sh
MIME type:	text/plain
ssdeep	192:cCu36p4hvZ5mN9oKNpivvV6PFITVaHvwF:Xp4hvZ5mN9oKNpivvQPFITVaHvwF
TLSH	T12F42453720F08B3297D061C863671B614FB2960B456724B8F4FE5B269F2DA0370EBB61
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6aa3c57fb0fe00c39a8ed9cc/reports/2c57df0f-5829-4ef9-a92a-5c2a480affa2/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/0938d9e8-5fe0-4af6-9249-4f4a5fef9389

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-09-11 09:10:31 UTC

File Type:

Text (HTML)

AV detection:

11 of 38 (28.95%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bq6ikzvaitmh6gbvdhq4pydn6hjryczkwbc6mdzs5moiwpqmdtna._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260911-k481ta1hnd/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

Executes a command shell one-liner

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0c3c8566a044d87f183519e1c7e06df1d31c0b2ab045e60f32eb1c8b3e0c1cda