MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec
SHA3-384 hash:	c4ca25ebdb9023a497adbfefcb2a9075643c7fe06470ce7ff17224cc59d0aa6b84b7aa785e6eb9a2b0bb8b753d272c89
SHA1 hash:	e13476e371f745fc454d91a093acebce65dc252f
MD5 hash:	f457b4665b737926fd18ed4d12a2da2c
humanhash:	juliet-neptune-iowa-undress
File name:	x
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	128 bytes
First seen:	2025-12-22 16:41:01 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:haX+v1FjX+v73VZv+vaGN3zSTASUKoS0/eXIFIXWX+v1Fg:WGrk3mSaqA54X4IXQGg
TLSH	T181B0926A07033D03807DDC3A32B10FCC74257B4D144B3B883CC3406FD0845C42268914
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

35

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-AEH.12819814.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-22T14:43:00Z UTC

Last seen:

2025-12-22T15:01:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/fc753617-0cb0-4736-ab8b-334001b63f20

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

96%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec/

ReversingLabs TitaniumCloud Text.Browser.Generic

Threat name:

Text.Browser.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-22 16:42:43 UTC

File Type:

Text (Shell)

AV detection:

2 of 24 (8.33%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hnx3qy2w2fptwuxqtpolim6ogt3ehzxu63kje4i7jsg4vsfmplwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251223-k1k5ks1ndt/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3b6fb86356d15f3b52f09bdcb433ce34f643e6f4f6d492711f4c8dcac8ac7aec