MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0fcbbe433ab1b3cddf82078b0d343478fdb48aa59a10e0661a96ea93189bd3be. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 0fcbbe433ab1b3cddf82078b0d343478fdb48aa59a10e0661a96ea93189bd3be |
|---|---|
| SHA3-384 hash: | a5bb9c595ecb9bc18589df1fc62e3069a4055e3bf86994b4a63624b7952adbe4cfaa77e43788205770d32ede982217a6 |
| SHA1 hash: | 459f01ccd9687a3e110cf39ff23330348525f400 |
| MD5 hash: | 8b43394f7cc2827b69051ca879517f6c |
| humanhash: | social-one-jig-bulldog |
| File name: | test.sh |
| Download: | download sample |
| File size: | 771 bytes |
| First seen: | 2026-04-26 10:45:08 UTC |
| Last seen: | 2026-04-26 18:06:15 UTC |
| File type: | sh |
| MIME type: | text/plain |
| ssdeep | 12:jGmmvPdnsCGMOd2z+fQk+TfQwWflszP01WQN8QNTZQZ8qTogUIKjiqvSj:5eVYMY2qQkKQwWfFlDTZC8OU3Oj |
| TLSH | T118011052D7D290073ABC89A9BAA4A18CD50C348336929098BCDD1660EFB4D5F30F1F27 |
| Magika | shell |
| Reporter | |
| Tags: | sh |
Shell script dropper
This file seems to be a shell script dropper, using wget, ftpget and/or curl. More information about the corresponding payload URLs are shown below.
| URL | Malware sample (SHA256 hash) | Signature | Tags |
|---|---|---|---|
| http://176.65.139.141/ | n/a | n/a | n/a |
Intelligence
File Origin
# of uploads :
47
# of downloads :
3
Origin country :
SKVendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Verdict:
Unknown
File Type:
unix shell
First seen:
2026-04-26T08:07:00Z UTC
Last seen:
2026-04-26T08:55:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
Score:
7%
Verdict:
Benign
File Type:
SCRIPT
Gathering data
Threat name:
Linux.Trojan.Generic
Status:
Suspicious
First seen:
2026-04-26 10:44:04 UTC
File Type:
Text (Shell)
AV detection:
7 of 24 (29.17%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh 0fcbbe433ab1b3cddf82078b0d343478fdb48aa59a10e0661a96ea93189bd3be
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.