MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac
SHA3-384 hash:	9b46a1f85534698ab429bc452e114ce45aa667b5cbcee114dcc5a3ea9af05e4d766ae52d870175de72a136aa93e31e1c
SHA1 hash:	e4075353fac142dbce9be559f92694dda2ce2972
MD5 hash:	d3d01d4cc63ee900d84aebf9bd1ac847
humanhash:	alanine-eleven-apart-beer
File name:	o
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	84 bytes
First seen:	2025-12-20 09:34:55 UTC
Last seen:	2025-12-20 16:04:15 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:L6FT7KDQNUClswWeFGBzSEyLTUWOevn:L6FTODWajNI5v
TLSH	T1C6A011AB30203000C808FC0828B20FAC20A382E23A080A0CA0FA0230CCA8A2838A0A08
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

35

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6946b428e126b9ff4389f558/reports/88ffc8ac-1c63-4186-8990-158def7475f6/overview

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Suspicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-20T07:10:00Z UTC

Last seen:

2025-12-21T07:33:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/459e516d-4d1e-403b-958a-d54a2cd6624c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=b2kpxx2nkdihdhb5w2wid2chvcfy6jhywrob6klc2dov6goolcwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251223-nvzybswlat/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0e94fbdf4d50d0719c3db6ac81e847a88b8f24f8b45c1f2962d0dd5f19ce58ac