MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66
SHA3-384 hash:	e173c7b1709130c4a6e4ffbdbb1173107db5c6bc6f8dfe4149e927378e2302410a1c704b759e9948ad4a4f8080b30df1
SHA1 hash:	25a04c12ccfa8a17c8bc5a5393c853c86b5652e8
MD5 hash:	46d7f5525822f7fcf261bcd24afafc28
humanhash:	neptune-bravo-single-neptune
File name:	f5
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'038 bytes
First seen:	2025-09-08 16:34:38 UTC
Last seen:	2025-09-09 11:33:11 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:IiScySSNKcxVKTyCCoC0NAXQr0wzYK+KNIy4lCIbkyj:IiPybNKcxUyCCoC0NAXQr0wzYH64lCIl
TLSH	T17D11FADE6C61A041850ABF54A1B33734B915E1A123A0EF4EDED4197987CCE20B1E9BC5
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-08T14:32:00Z UTC

Last seen:

2025-09-08T14:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/248bd688-d216-45ba-86d4-44168391a3fb

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-08 17:14:10 UTC

File Type:

Text (Shell)

AV detection:

17 of 38 (44.74%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ddqfszs7a4nrzntf7gyauzoxhdms5fjaxfd4rmrz5ndtvuq6tvta._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/18e059665f071b1cb665f9b00a65d738d92e9520b947c8b239eb473ad21e9d66