MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8
SHA3-384 hash:	aef037dd34f962484c235b28a04f7bb61336cf86f73763b683b8c77ea14f0d74dba4127be48d1d46829ac2075d54232d
SHA1 hash:	ceaf321afb8791d6e8ed10c9955516eac2dd1bb1
MD5 hash:	54b9e44f44ddf9b393d237d404df8daf
humanhash:	quebec-mockingbird-kentucky-white
File name:	.shell
Download:	download sample
Signature	Xorbot Alert Create hunting rule
File size:	208 bytes
First seen:	2024-12-24 16:36:21 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:QnQzanFCKl2X4HMilLwooxyLwooNqRRLwooaSLM9Kd:lOnFflHMewooxYwoo2woopM9Kd
TLSH	T1F0D012C9D05264B0D8C0AAFD36E1FC407071B5D69CDD4A54CCC8F8B052C9F1C2048E4D
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

98

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

93.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=676bbceb8a4d48ee35ff2f57linux22vpnfull_triage

Tags:

virus jaff

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/676ae33d103c07c16378005c/reports/2b73718f-4ff7-4b64-a8e1-50572ee4ca97/overview

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

23%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8/

ReversingLabs TitaniumCloud Script.Downloader.Heuristic

Threat name:

Script.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-20 23:08:26 UTC

File Type:

Text (Shell)

AV detection:

3 of 38 (7.89%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jkjsb73oz56g455zwp7asq4p2yoxqzzqtkfgcm5lvk4lape56sua._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4a9320ff6ecf7c6e77b9b3fe09438fd61d7867309a8a6133abaab8b03c9df4a8