MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116
SHA3-384 hash:	18072ad450475772c7d046cc66a14372770e13c624068faed74034a49e9ec6b08714b432b4dba4813de1fc465e431dc7
SHA1 hash:	bc1914ceb1b7015c7ddd7be909b3e5ad8dc58171
MD5 hash:	10277480647f83895ce1097bb2c2007f
humanhash:	apart-cold-mississippi-california
File name:	o.xml
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	708 bytes
First seen:	2025-10-01 22:21:46 UTC
Last seen:	2025-10-02 00:07:35 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:FzY8id/7JAC7akxGWi2jX0KTk5jaUtGTEinv:FzY8k1/sWi2jkFPcTh
TLSH	T10E017DECB07C8B91069DC641B1F1501444B3D0C7B0F497E5F2AF88256F499893B23A1D
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/74905e52-c3e6-4795-90eb-f6aef2a5de35

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116/

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-01 23:14:56 UTC

File Type:

Text

AV detection:

9 of 36 (25.00%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=firii44gihu5ojdug6idsbu7pzhytpubqz3ywdx2v57cbyzbyela._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2a2284738641e9d72474379039069f7e4f89be8186778b0efaaf7e20e321c116