MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2618a8ed67c07427965f10cd2c43676f4b929083d85e821d55edee8ea17cd94f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2618a8ed67c07427965f10cd2c43676f4b929083d85e821d55edee8ea17cd94f
SHA3-384 hash:	227ba043f6a97bc4ab8b65eaa4f0ce52b4f1b36b9bd0ac1781cc8ef9d6144d037754b364ab0af8ded4b109feb34d107b
SHA1 hash:	791245c959deb353d28220e9c976efb4c7f636df
MD5 hash:	3c258e69b9e96664f96b06878d86448d
humanhash:	mobile-kitten-stairway-moon
File name:	o.xml
Download:	download sample
File size:	835 bytes
First seen:	2026-07-23 18:45:13 UTC
Last seen:	2026-07-24 12:23:26 UTC
File type:
MIME type:	text/plain
ssdeep	12:FH8ioNJAC7ukxGWi2jU30+0K5+A+JjukzndilkzndcfZhG+E6:FH8j/wWi2jzhV0SS
TLSH	T1DE01F79E9198CB70467AC58AF3B56038E591E08791E59BD2F34D0D326FF2C4E259360D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

562

# of downloads :

3

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2650.11686.13225.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

downloader dropper opendir

Link:

https://www.filescan.io/uploads/6a62ff9f11414033a33b27fe/reports/48016a1e-1c6a-426b-bef4-5f02261bd23c/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

First seen:

2026-07-23T15:18:00Z UTC

Last seen:

2026-07-23T19:07:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2618a8ed67c07427965f10cd2c43676f4b929083d85e821d55edee8ea17cd94f/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/2618a8ed67c07427965f10cd2c43676f4b929083d85e821d55edee8ea17cd94f

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script.Downloader.Heuristic

Threat name:

Script.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-24 02:12:00 UTC

File Type:

Text

AV detection:

7 of 36 (19.44%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=eymkr3lhyb2cpfs7cdgsyq3hn5fzfeed3bpiehkv5xxi5il43fhq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2618a8ed67c07427965f10cd2c43676f4b929083d85e821d55edee8ea17cd94f