MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 704bb081c6defacb2fdf2d69990b9c534128c3dfde133ff6005bd79f28926617. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	704bb081c6defacb2fdf2d69990b9c534128c3dfde133ff6005bd79f28926617
SHA3-384 hash:	930724d8ae0f7cb83dff3f5ebdb6ecb6da191e6db8f2e9dc0d5f42206f839296e75955e3bd2a3f9ebcbb3c5034d12aed
SHA1 hash:	e9da6f40eec385e45c98c0d95332c5a1f4b3a2dd
MD5 hash:	a664544587cb81599f2a2969b4495e8a
humanhash:	cat-utah-kilo-table
File name:	l
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	464 bytes
First seen:	2025-05-08 20:07:44 UTC
Last seen:	2025-05-09 12:06:53 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:oJ/ewmKJ+mMSrPQSJREmMSt7YJREmMSUUsv:oJ/fDJ2cPQUqWuqj
TLSH	T1CEF05CF60A0878F0F2D6A4A8B133DB5AA4ED90C75D110915E8B8D2F59CE4F28BC54E90
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

89

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=681d958991991ead82b65e36linux22vpnfull_triage

Tags:

hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/681d0f2cbab2591d065505e2/reports/76be0c47-b20e-489c-b206-e7b70f707bdb/overview

Hybrid Analysis Linux/TrojanDownloader.SH

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.SH

Link:

https://www.hybrid-analysis.com/sample/704bb081c6defacb2fdf2d69990b9c534128c3dfde133ff6005bd79f28926617

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/704bb081c6defacb2fdf2d69990b9c534128c3dfde133ff6005bd79f28926617/

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-08 20:53:25 UTC

File Type:

Text (Shell)

AV detection:

5 of 24 (20.83%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=obf3baog335mwl67fvuzsc44knasrq673yjt75qalplz6kesmylq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/704bb081c6defacb2fdf2d69990b9c534128c3dfde133ff6005bd79f28926617