MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391
SHA3-384 hash:	f7e8f1c7a785719626924ef6e950a5ed75c7f7787c2ba71f662d656660027853121c644c6b5c9840cdb6f8a47f0c2e33
SHA1 hash:	1c3d4cdb09a44fb9777bb46d40a0160993f25b54
MD5 hash:	f97c6c7b1362286ef874042e850a6243
humanhash:	oranges-california-spring-low
File name:	fc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'290 bytes
First seen:	2025-05-14 22:47:06 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:wcKqv0m9Nn6soeFqSsoeFqcPQeoeFqcPQeoeFqcPQeoeFqWveFq/e4:3PDn6aqSaq14q14q14qWcqz
TLSH	T1AD21D3531B0C79F0FE8E991AB2639B9A5CDDD09F3D430A11D03083D6BC945245D34B70
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.37.2413.13527.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68257c3f4a59e5a2ce04b4a9linux22vpnfull_triage

Tags:

trojan virus agent

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68251d7a1de1514c6873163f/reports/cba0abee-174b-4767-a00e-5b13d9471305/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391

Nucleon Malprob Malware

Score:

86%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391/

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-15 01:00:00 UTC

File Type:

Text (Shell)

AV detection:

9 of 24 (37.50%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hoqh7weime4exacjxlcql67gwcp3fy33af4aigutyjoznlhkgoiq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3ba07fd88861384b8049bac505fbe6b09fb2e37b0178041a93c25d96acea3391