MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601
SHA3-384 hash:	b3f3e74f9b1a16d85ae689d11d837cfb9a9b2d6c6d3bfe48a9eb02bfb5edecd88c3097635be43f4c6fbdc4ce8e84cdc6
SHA1 hash:	26f5e2d6f604d4e04c8a422bfd8d97e179d568cf
MD5 hash:	f7f6f47e4ac319f8f55f9b82b10cb0b3
humanhash:	hamper-island-apart-friend
File name:	o.xml
Download:	download sample
File size:	669 bytes
First seen:	2026-03-01 20:39:37 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	12:FzY8id/7JAC7akxGWi2jX0KTkQnjzLbR07gnv:FzY8k1/sWi2jkIjLO7E
TLSH	T17A014C9CD17CDB81099DC686F2B051048490A0C7A1F4ABD5F24E0830AF25D49397330D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan-Downloader.Linux.Sh.3919.11086.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69a4a820002d37d5c9827624

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

opendir

Link:

https://www.filescan.io/uploads/69a53a3510e80629d4f824af/reports/d417f880-5a12-4390-84b9-3a8e1a29bd44/overview

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601

ReversingLabs TitaniumCloud Script.Trojan.Egairtigado

Threat name:

Script.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-01 20:57:07 UTC

File Type:

Text

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=esgxydt5mu32yfthbbmevuhpgnizxdemn2d3dffepfxsjhmm2yaq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/248d7c0e7d6537ac166708584ad0ef33519b8c8c6e87b194a4796f249d8cd601