MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d
SHA3-384 hash:	5d7a0b5b816b763919cb22916b709539be5792a1c3e6ed586b46bcec7ef2e08cadac35e71a824fcba7887f6a4a952a69
SHA1 hash:	1d78cff1e85eda54c7aad4de780486ebc1f408d6
MD5 hash:	66bc4bd7f211c795b67ffd1b2030c86a
humanhash:	florida-sixteen-white-november
File name:	o.xml
Download:	download sample
File size:	727 bytes
First seen:	2025-11-16 01:51:01 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	12:FH8ioNJAC7ukxGWi2jU30+0K5+A+5jaUtsMmZhG+E6:FH8j/wWi2jzhPA
TLSH	T1090149ECB0A88A5105BCC642F1F24415C4B3D0C3B1B497E5F2AF95276F2989A3B53A1D
Magika	xml
Reporter	abuse_ch
Tags:	xml

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

33

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69197916bdb0ec3a9dc2328a

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade opendir

Link:

https://www.filescan.io/uploads/69192e1981f5240e1a8556a4/reports/9aa9740e-76f3-4c5f-934a-bdd5190b5fc0/overview

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-16 02:21:56 UTC

File Type:

Text

AV detection:

7 of 24 (29.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l76zvkepc7lji3mdzorqt53i3g3yxrzueinbwghiabvmn6p4wnwq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5ffd9aa88f17d6946d83cba309f768d9b78bc734221a1b18e8006ac6f9fcb36d