MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 36366f89feda31d7037b9e78798229ab3e284c620bce32c4bc49b71f4d09f828. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	36366f89feda31d7037b9e78798229ab3e284c620bce32c4bc49b71f4d09f828
SHA3-384 hash:	fca783a7659a5366658662158bb855ede0cc8acfcb111f211ceb79a2f909d8dd6c80437d9c479042ba5e571842a7a01c
SHA1 hash:	5906efa26c32078cfd0705d60deb95f63ea58f0f
MD5 hash:	46b93daddf1ecac2229de53036bc6c39
humanhash:	ceiling-uniform-asparagus-sixteen
File name:	lil.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	961 bytes
First seen:	2025-04-01 16:36:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:A5WejSWWI204SWgSWSSWRSWJHQSWvoSWbzSWASWiSWXmSWmv:gfjS6Z4SlS3S6SIQSioSOzSZSZSFSLv
TLSH	T17C11308E5172B0018B94DF103192DAC9A119C3C1B6555F6AFE992FB6EAC4A0078BDF4A
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

108

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.683.26219.6800.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67ec18f3855e5ec5240ba9c2linux22vpnfull_triage

Tags:

virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67ec1646631830704a8d6b9b/reports/dc19edf5-80cb-41a3-a1f4-2a5c4243c422/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/36366f89feda31d7037b9e78798229ab3e284c620bce32c4bc49b71f4d09f828

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/36366f89feda31d7037b9e78798229ab3e284c620bce32c4bc49b71f4d09f828/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Heuristic

Threat name:

Document-HTML.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-30 14:46:37 UTC

File Type:

Text (Shell)

AV detection:

7 of 36 (19.44%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gy3g7cp63iy5oa33tz4htarjvm7cqtdcbphdfrf4jg3r6tij7aua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250401-t4wj6avl14/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/36366f89feda31d7037b9e78798229ab3e284c620bce32c4bc49b71f4d09f828