MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb
SHA3-384 hash:	6cfa9adfdacfa7f8b5e2a921f13028d3f9d4a853592a9a1f4ccd8bfd5d3b469e0d983e08d1cbdfc412a3884d2473dcc1
SHA1 hash:	b9952bf24b0a1c70525e514ff0d93e4f1e830229
MD5 hash:	2705da95983ba937aebe74362d14d19d
humanhash:	vermont-emma-lemon-louisiana
File name:	o.xml
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	734 bytes
First seen:	2025-08-13 07:16:32 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:FH8ioNJAC7ukxGWi2jU30+0K5+A+MjR3KEDCIKEDoBjZhG+E6:FH8j/wWi2jz8IHf
TLSH	T15001267CA1A88A5204B5C4D7B1F09506C080808BA6AA53E5F38D09266F28CCE3D5320C
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

29

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-BJD.71979644.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Suspicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb

ReversingLabs TitaniumCloud Script-JS.Downloader.Heuristic

Threat name:

Script-JS.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-13 10:23:45 UTC

AV detection:

3 of 38 (7.89%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=g5oaru4nhtyb3gh5ctrqm633vlekt7wjexzx3cvnijse6pgvtpfq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/375c08d38d3cf01d98fd14e3067b7baac8a9fec925f37d8aad42644f3cd59bcb