MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43
SHA3-384 hash:	2eed418f0a0c1069935fbc14b78c936cf31313be33bb605dcd0dc1dbfab3bc247e705c7e89f33a6d285aa628fa9d218d
SHA1 hash:	3857b3a06e1113628a4ead9cd9b36d45328e2040
MD5 hash:	f614a798b521ec1f08555c78c496ee72
humanhash:	ink-december-five-vermont
File name:	o
Download:	download sample
File size:	208 bytes
First seen:	2025-11-28 18:17:26 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:UrmDoSuFXy4SOmDoSuFXyD+e2c6FTHMUSuVgusv:UrmMSGmMSdARMusv
TLSH	T10DD022AE54082431F0CEB2F23A17CB4D40A44FC22C260C70E8E4C638DCA8A382CB2E90
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

27

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/de031c0c-e157-4799-aa3f-e6e81deeb2cb

Nucleon Malprob Malware

Score:

94%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=b44cfnlv5pfjduw3guepxvbvd2rlrygzucjhmibuzskzsmyuprbq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0f3822b575ebca91d2db3508fbd4351ea2b8e0d9a092762034cc959933147c43