MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8
SHA3-384 hash:	fabf44e8ddd01893f6f7ce90256e74fc3edae6723eb88fb56f1f8a99fa34eec335dca80a107662cc01912b179988c536
SHA1 hash:	dcd917d5a0c0c99d267f818209960a8d4028c304
MD5 hash:	fea9100ce71f635381c53ffb86318b79
humanhash:	cat-beryllium-november-princess
File name:	tbk
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	379 bytes
First seen:	2025-10-07 03:14:10 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:SXq8WwfGwAK/w+QAjXq8WoGNIZo+/D0QAjXq8Wya9ya4yT6QAjXq8W878aEL:IdfJAKo+QADENI370QADihZ6QADRovL
TLSH	T1E7E0129EC0101C023104DD80D0AF12B0B61DBDF0C258EE599E4F3E3E638CA103CB8555
Magika	javascript
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

60

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68e485ac621afcc881314f98/reports/17388628-1169-4f79-8a62-bfea4da65e9f/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-10-07T01:21:00Z UTC

Last seen:

2025-10-07T01:38:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/c3a84a5b-4f12-4e74-89da-574f0c2fc799

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-07 04:22:26 UTC

File Type:

Text (JavaScript)

AV detection:

10 of 38 (26.32%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=keb66epvqmk6zxtbx4ygzehlgkgcuky5tmxi2n43kkxz5pzhdpea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251007-fsa77ayxd1/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5103ef11f58315ecde61bf306c90eb328c2a2b1d9b2e8d379b52af9ebf271bc8