MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f
SHA3-384 hash:	1b21c5c3093be77a9e31f5c07c427650a0a2c2f8c09f99a7fdc9abcfe701194849513f7cf0f26eee1c9d1421afcc7b5e
SHA1 hash:	f0e2e71591de7154b1577ffc8992da79e45f9c80
MD5 hash:	faa433cce229925bfff20eba33b17575
humanhash:	queen-freddie-tennessee-music
File name:	wwg
Download:	download sample
File size:	319 bytes
First seen:	2026-07-01 03:12:35 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:ho2VLnSDNe1H3EeDZNcAX/6UFxcFs7smI9//P6Q//D7B/+bZJbKXFs7Yjs:NtHNcAX/6KGTsJbKKEjs
TLSH	T164E08C66C3CA186B84BF4AC4B47B090CFA00E033BE164B183B9299B1CA7423460AD454
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

73

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

Script

Link:

https://opentip.kaspersky.com/4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/3c574413-0360-43cd-a0c5-90c344fa1510

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/4dd8a2c97d66f3a01e73e7e0154de994a08c359674013f1ecc8e61af562d4e2f

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-01 03:13:43 UTC

File Type:

Text (Shell)

AV detection:

7 of 36 (19.44%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jxmkfsl5m3z2ahtt47qbktpjssqiynmwoqat6hwmrzq26vrnjyxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260701-dqzfwsdt5l/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.