MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d
SHA3-384 hash:	f1d51d0875176eae0c7f9c727cdcbc827fb11303d5c956afda6cf39959ee44ee6be000330f8012b2e24fb06d475daac9
SHA1 hash:	8f12ad514ec136bc8bc99bc15e18d5e9b5aafdd2
MD5 hash:	3bd1ebe5c979c5f58e9ecbbd90c5db96
humanhash:	cardinal-spaghetti-fix-carbon
File name:	.shell
Download:	download sample
File size:	217 bytes
First seen:	2025-02-23 21:17:37 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:QnQzanFCKl2X4HMiOQX9L/qydQX9L/qWqR6QX9L/qNSLM9Kd:lOnFflHM3QZ/qydQZ/q4QZ/qwM9Kd
TLSH	T1B3D0C9C9E15195F09CC489BA39E1B402656365EB9CE10F584B9CBAD0444DF0DF448B41
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

25

Origin country :

US

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67bc139aa0fd713c335c93f6linux22vpnfull_triage

Tags:

trojan agent virus jaff

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/67bb909260f4b4f0724b3607/reports/f9c83932-ea38-4cb2-81e0-c1f71384d005/overview

Hybrid Analysis Linux/TrojanDownloader.SH

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.SH

Link:

https://www.hybrid-analysis.com/sample/2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

19%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d/

ReversingLabs TitaniumCloud Script.Trojan.Boxter

Threat name:

Script.Trojan.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-24 04:00:24 UTC

File Type:

Text (Shell)

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fnbiqa6zsgsc5vdi3acpeuxa6cfgqwbomwbyvmd6uk3slyaywqoq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/2b428803d991a42ed468d804f252e0f08a68582e65838ab07ea2b725e018b41d