MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6
SHA3-384 hash:	b776e06d5beaa9a112ad60218589f85e9f9411282f3ec9e22f911a3e95a72f8dfc4086f5705c28fd47529449f91d2e5d
SHA1 hash:	59d9388c1f087a45b1a30ebb1b896192b9dd97ee
MD5 hash:	78e9eea9bfd9dcb0a7b854283f5b3558
humanhash:	orange-early-magazine-iowa
File name:	payload.xml
Download:	download sample
File size:	627 bytes
First seen:	2026-08-10 05:32:12 UTC
Last seen:	2026-08-10 06:18:53 UTC
File type:
MIME type:	text/plain
ssdeep	6:vtmc4Fh5XAYVic4subid/n7owc4Fh5Xo4Fh5XjhHArGHbiOLxGzWiFMxFraF2vcj:FzY8id/7PAC7ikxGWi2jX7k+XAwALnv
TLSH	T152F024DCB1BCCFE10DADC88AF1F094004491A48BA1F46BD2F38D0A30AF54E8A396321D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

21

# of downloads :

16

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

downloader opendir

Link:

https://www.filescan.io/uploads/6a796d7a00662b636535ec7c/reports/87921d3c-778b-4ca3-abdc-3bd784aa2f60/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=k2sxawtyb6ci7ksv5blr3f7xbmkgfqwc6pgpbrvkexvi5q7untla._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/56a5705a780f848faa55e8571d97f70b1462c2c2f3ccf0c6aa25ea8ec3f46cd6