MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c
SHA3-384 hash:	acc9dffd0984e24efca4a3ccd06b1acd96e2d8555e15d7477ffdda63d74b4dc2f1e8171bb84f9e01f64a530279c97223
SHA1 hash:	ec82f4dece52fea8b53aa622362891c8e2836109
MD5 hash:	d92ed30390b949e1b251a3309ef1e33b
humanhash:	glucose-king-helium-sweet
File name:	tbk
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'050 bytes
First seen:	2025-09-08 16:34:37 UTC
Last seen:	2025-09-09 00:04:30 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:IiScySSB0EKxExV7EyCConE0N1EXHE0lEzYKjEKNIym0ElnEIdEyhb:IiPybBKmx+yCCoE0NKXk0azYT6ClEICk
TLSH	T1671136DE6C61A441840A7F4461B33734B811E1E123A0AF6DDED41D3687CDE30B2E9BD6
Magika	javascript
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-08T13:51:00Z UTC

Last seen:

2025-09-08T13:51:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/1ac0ba43-047f-420a-9e02-4bb7c9422779

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-08 17:14:10 UTC

File Type:

Text (Shell)

AV detection:

17 of 38 (44.74%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hpwn7e2tj57k3mgacno52wg3cigt3bd2clkrer4e5iwxni2flboa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3becdf93534f7eadb0c0135ddd58db120d3d847a12d5124784ea2d76a345585c