MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3758fd5ecfa6ab7dee5b1fff3ea4c8231075b2b17a557ad966ee8d6bb0660215. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3758fd5ecfa6ab7dee5b1fff3ea4c8231075b2b17a557ad966ee8d6bb0660215
SHA3-384 hash:	66667e6c0d97eed1b1751bc6f930f7cc390296f28efdaac2b63b3e505478661bd394dd17342874a3d3d0d345bfe2734b
SHA1 hash:	4f7c24c0e4ab9a69b57f7bf24be1ec250ba1fdbc
MD5 hash:	57b14dcf72bcb99c1c5748f884ce755f
humanhash:	kitten-ceiling-vegan-pip
File name:	goahead.sh
Download:	download sample
File size:	543 bytes
First seen:	2025-04-28 19:37:35 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:htI7P8FVvh9NKP8FVv/F09NKP8FVvc9NKP8FVjnM9NKP8FVjY09Ni:bIoFVpn3FV10n3FVEn3FVgn3FVNni
TLSH	T180F0D0DB0CE605F01565550E7ED76161E062BE5974C2F6CB3C58043EC7E4660F0D3AC5
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

64

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-36.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680fdd0ccc5fb3600cc410e6linux22vpnfull_triage

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/680fd934218c4a98ade5e793/reports/692b6eee-e749-44a5-81f9-4e8f7370e1fc/overview

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3758fd5ecfa6ab7dee5b1fff3ea4c8231075b2b17a557ad966ee8d6bb0660215

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3758fd5ecfa6ab7dee5b1fff3ea4c8231075b2b17a557ad966ee8d6bb0660215/

ReversingLabs TitaniumCloud Document-HTML.Downloader.SAgnt

Threat name:

Document-HTML.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-28 19:38:30 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=g5mp2xwpu2vx33s3d77t5jgiemihlmvrpjkxvwlg52gwxmdgaikq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

linux

Link:

https://tria.ge/reports/250428-ycgn5sxscx/

Behaviour

Writes file to tmp directory

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3758fd5ecfa6ab7dee5b1fff3ea4c8231075b2b17a557ad966ee8d6bb0660215