MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53
SHA3-384 hash: db2885b3579a416fea2d1c64d4266f5529563c5f2284a6f382a0ae5883d0fdac47ad6036ad89a5d3e9b1aa08dde22129
SHA1 hash: 61fdf9f4568d0e40b8faae8cc224efc71404190d
MD5 hash: 0b09b237a6da01d82553c62755ec7423
humanhash: ack-november-alanine-mike
File name:403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53
Download: download sample
File size:4'055 bytes
First seen:2026-07-02 10:15:40 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 96:HsKBiqTamDhDCkxwq04GiG2KuedMDHWak+zlxwQoFW0gMNk+04k+39xqrUF//OXb:HsoRhoMDHpk+z3wQGW0gMNk+1k+3vqr5
TLSH T19981D1FA619A5530FD57CDB81621546250CBD7A30AAEED06F20F1A442F6F9C0B93BB07
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter JAMESWT_WT
Tags:41-216-189-183 sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.BV.Downloader-AEH.76425294.UNOFFICIAL
Create hunting rule

Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
downloader
Link:
https://www.filescan.io/uploads/6a463a5768374f12b4d0e77a/reports/54504dbd-d16c-488d-91cb-94fbc6099575/overview
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-02-06T08:43:00Z UTC
Last seen:
2026-07-02T07:57:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Downloader.Shell.Agent.bc
Link:
https://opentip.kaspersky.com/403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53/results?tab=lookup
Score:
98%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53/
Verdict:
Malicious
Threat:
Downloader.Agent.HTTP
Link:
https://tip.neiki.dev/file/403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53
Threat name:
Script-BAT.Downloader.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2026-02-06 11:20:03 UTC
File Type:
Text (Shell)
AV detection:
9 of 36 (25.00%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ia5j3guqh3nqr3v2dd5qs37ju75cbvzi3cdsyvdy6yrso7ps3rjq._file
Result
Malware family:
n/a
Score:
  4/10
Tags:
antivm discovery linux
Link:
https://tria.ge/reports/260702-mantwsfz51/
Behaviour
Reads runtime system information
Writes file to tmp directory
Checks CPU configuration
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.11
Link:
https://yomi.yoroi.company/submissions/403a9d9a903edb08eeba18fb096fe9a7fa20d728d8872c5478f623277df2dc53

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments