MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d
SHA3-384 hash:	7a3076aa9fce70970a2422ffa3413f7942b0655365bf20a05f06f4026a311fcea375a0fb080d6833162179403a017a25
SHA1 hash:	96117f58344f2172363ad3922637fee46f3d2e66
MD5 hash:	09a24875634eac6288309e5660042f17
humanhash:	lactose-mockingbird-wolfram-sad
File name:	bbcl
Download:	download sample
File size:	311 bytes
First seen:	2025-09-08 16:34:31 UTC
Last seen:	2025-09-09 11:39:42 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:h2VsEWQJAnAFKCwloXDL6NXsmIqwXw81CXD7m+bg6KNXYaF:A0AYloy1wXwrXDqiKiaF
TLSH	T1BEE02B559153009244674F20D07337787321A837BF144210FE038171DAC0B46F0E01E5
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/68bf06b4cfa59bfdc7f3d7f4/reports/34c0985b-ec3e-43e5-a38e-67cd4e1185b7/overview

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-09-08T13:51:00Z UTC

Last seen:

2025-09-08T13:51:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/036249cd-98a7-42f0-ae71-eb6aa6c6c44d

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7609b96b82cc099e19ce4898d6f5fb4ffa803f5ed2a441d55926a762d261ea5d/

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-08 17:09:00 UTC

File Type:

Text (Shell)

AV detection:

11 of 38 (28.95%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=oye3s24czqez4goojcmnn5p3j75iap262ksedvkze2twfutb5joq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.