MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef
SHA3-384 hash:	2d5643c04bd07cf54a4e17b7882c807548711b115ffcf625a55c80d5cf2f9fd3d8b75d8f910688d394eeeff07eb4d58b
SHA1 hash:	275b7168921e149cb18d4674778ce11cfe45424f
MD5 hash:	176d97b4a5645e568dbe720056bdbbda
humanhash:	mobile-two-william-eight
File name:	vc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	4'709 bytes
First seen:	2025-07-24 02:05:03 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:1tLjBLwZLUPcdLfGLYFqLjcLE3NaraXNkVgPchz0EFgnCwpFZPcKAF/yIHKYPQVa:1xhoGiA8cSEKa9oSew4gCwVa6SBWQ
TLSH	T16DA1E499777607734E50DF12F229C63E2547C28084519FA4A4BBF0F978BBF84A953236
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Linux.Medusa.C.Generic

Verdict:

Malicious

Labled as:

Linux.Medusa.C.Generic

Link:

https://www.hybrid-analysis.com/sample/1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/4e99fc60-ae7b-41a2-a9be-305cbabb414d

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef/

ReversingLabs TitaniumCloud Linux.Downloader.Medusa

Threat name:

Linux.Downloader.Medusa

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-24 01:30:05 UTC

File Type:

Text (Shell)

AV detection:

16 of 35 (45.71%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=doibxzdzyveq4ark5j4dvts36fn2jsezntwq7vjhujwn3wiahhxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250724-hwsbzsgq6t/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1b901be479c5490e022aea783ace5bf15ba4c8996ced0fd527a26cddd90039ef