MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4a7db2f565b2f9663b33ab2bc124b37f4d80068ce6e1a5d5d17df3a92e3f6275. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4a7db2f565b2f9663b33ab2bc124b37f4d80068ce6e1a5d5d17df3a92e3f6275
SHA3-384 hash:	69e3f6da04dae7ca2b92b8bdb92e1ad735b0cd8f7945517594f2000a0e37be2e0d864a51b9a69968fea830b30480de6e
SHA1 hash:	9852e2cfbf8af7a7bb54a74f0d72540f250163d1
MD5 hash:	f77847d7bb832e1658422a9e8b8d54fc
humanhash:	east-october-december-virginia
File name:	ftp1.sh
Download:	download sample
File size:	8'856 bytes
First seen:	2026-10-19 09:53:49 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:+9D6hmzytpEFh9D6hmzytpEFh9D6hmzytpEFh9D6hmzytpEFE:cjjjE
TLSH	T1B502AE9635B138747C76AC97232A1C047580E0566CFBEE79A8D8B5B484CEE0971D41EE
Magika	txt
Reporter	adliwahid

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

65

Origin country :

NL

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/0bee210f-f5c8-40d1-ac2e-c3e96cd4ceb4

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

96%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4a7db2f565b2f9663b33ab2bc124b37f4d80068ce6e1a5d5d17df3a92e3f6275

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4a7db2f565b2f9663b33ab2bc124b37f4d80068ce6e1a5d5d17df3a92e3f6275/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-10-19 09:54:18 UTC

File Type:

Text (Shell)

AV detection:

9 of 36 (25.00%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jj63f5lfwl4wmoztvmv4cjftp5gyabum43q2lvorpxz2slr7mj2q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261019-lxnlza1y3r/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

Executes a command shell one-liner

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/4a7db2f565b2f9663b33ab2bc124b37f4d80068ce6e1a5d5d17df3a92e3f6275