MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d
SHA3-384 hash:	bda83206f0833285f85b2417d64912b9ffe2d2c90c2828830b99bc885ebf3709a538d0180515d6b50ede681faa7b910d
SHA1 hash:	92914bda6109068c227bf03b666ded94c05bb499
MD5 hash:	ab99960dddcb7c5b8678110ff87a454e
humanhash:	south-maine-white-october
File name:	tbk
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	379 bytes
First seen:	2025-10-09 03:52:32 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:SXq8WwfGwAK/w8WAjXq8WoGNIZo+/1AjXq8Wya9ya4yVIwAjXq8W878a2:IdfJAKo7ADENI3tADihL9ADRoj
TLSH	T16CE0129EC02148023104EDC0E4AF02B07A0DADF0C25CDE8A9B4F7E3D639C6103C78654
Magika	javascript
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68e731b75a3bccf09ebe6da7/reports/2f3d4354-a6ab-42c2-933b-4f1e5dc600cb/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-10-09T06:15:00Z UTC

Last seen:

2025-10-09T06:44:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/f64bccb5-97cb-4e30-810d-ff4d036a8400

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Heuristic

Threat name:

Document-HTML.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-09 04:10:16 UTC

File Type:

Text (JavaScript)

AV detection:

8 of 24 (33.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fv7pxrjkzb4tt6umhm4a43byv3qv7xhnuwxfaiesukfzdggcvr6q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251009-f84jnsaq8w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2d7efbc52ac87939fa8c3b380e6c38aee15fdceda5ae502092a28b9198c2ac7d