MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39
SHA3-384 hash:	6b1d6bf81b36a4f5aadaef1d78fc1affbcdec07e9d42704b2e5f69d6e27fd55071717526c2f35d8f279242767b63b977
SHA1 hash:	eedf449b151200830fd25b6847e0cbd8a6f840a3
MD5 hash:	21ad955579a3e107f6f853fd7ae2b226
humanhash:	five-social-alaska-may
File name:	l
Download:	download sample
File size:	463 bytes
First seen:	2025-07-06 05:45:13 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:oWLgewmKWLBmMSXJREmMSt7YJREmMSUUsv:oWLgfDWLLMqWuqj
TLSH	T1E0F054F10D0C7470F1D5A475B5379B5A64DF40C35C110D19DC78D2F65CD4E249990E90
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

15

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

89.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=686a8d2ec9eb974737671543linux22vpnfull_triage

Tags:

n/a

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/65862104-b283-4972-96fc-d3d4f911045f

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

90%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39/

ReversingLabs TitaniumCloud Text.Browser.Generic

Threat name:

Text.Browser.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-06-28 13:19:28 UTC

File Type:

Text (Shell)

AV detection:

2 of 38 (5.26%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=k3ni4v3ckwyzjefuo2rlbnnatgcytarcvo4wjwowfffamu6eti4q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/56da8e576255b19490b476a2b0b5a09985898222abb964d9d6294a0653c49a39