MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5d44c496f59a36ff39c1e9c69e02aa9d4402508afb7abd7922f2d7a487302e4d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5d44c496f59a36ff39c1e9c69e02aa9d4402508afb7abd7922f2d7a487302e4d
SHA3-384 hash:	631bb2460419b25c3ecc7d0551a1b75ee80bcdb8075a4e46189a5162ee9c120940bed869bec0a3f9197aafea8ba6d966
SHA1 hash:	05b597860f3a56e5ab04ba8211e6b763fefc11e1
MD5 hash:	4a8772fabb8190bffce63d00bdf6aeec
humanhash:	victor-london-tango-lemon
File name:	o.xml
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	666 bytes
First seen:	2026-06-06 15:17:50 UTC
Last seen:	2026-06-07 15:08:29 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:FzY8id/7JAC7akxGWi2jX0KTkkjtOB10Bhswnv:FzY8k1/sWi2jkwt016D
TLSH	T11401469CA2BC8F81199EC98AB6B059448492D0C7E2F9D7C5F34D0820BF40E8E266364E
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

574

# of downloads :

17

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2650.5701.1382.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/5d44c496f59a36ff39c1e9c69e02aa9d4402508afb7abd7922f2d7a487302e4d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/7e91ba86-ee9b-40d8-aefe-be1ed1daddda

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5d44c496f59a36ff39c1e9c69e02aa9d4402508afb7abd7922f2d7a487302e4d

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Ravartar

Threat name:

Win32.Trojan.Ravartar

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-06 16:22:22 UTC

File Type:

Text

AV detection:

13 of 37 (35.14%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lvcmjfxvti3p6oob5hdj4avktvcaeuek7n5l26jc6ll2jbzqfzgq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.