MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c
SHA3-384 hash:	35a0e8ac2ef1375099bd9645fd25a2e67d969cf44156a6a80b2ddd8d4d55b0f5afc9da78a4ede4a900830f491abb0243
SHA1 hash:	82943bb170155cc3e4d9386a2f93dece81bb1d86
MD5 hash:	860ca8de4c29abcdb13cefb41c501dbf
humanhash:	uranus-rugby-paris-oklahoma
File name:	.shell
Download:	download sample
Signature	Xorbot Alert Create hunting rule
File size:	205 bytes
First seen:	2025-04-21 06:58:13 UTC
Last seen:	2025-04-22 09:10:44 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:QnQzanFCKl2X4HMirLDoVUcZx4LDoVUcZNqRvLDoVUcZaSLM9Kd:lOnFflHMIDoVUGxGDoVUGADoVUGpM9Kd
TLSH	T18FD012C9D0A155B0D8C0C9FD25E1F401605182E5DDC20AD4CCC8F8D042C8F8FA44CE41
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

93

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

97.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68072fd9280f5f89a0d32461linux22vpnfull_triage

Tags:

trojan agent virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/6805ecba931404048d80c165/reports/d25cc5c8-09ac-45aa-8351-6096b675f630/overview

Hybrid Analysis Linux/TrojanDownloader.SH

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.SH

Link:

https://www.hybrid-analysis.com/sample/8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c/

ReversingLabs TitaniumCloud Script.Trojan.Boxter

Threat name:

Script.Trojan.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-21 19:41:32 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rngfcuyt3gpxrwuokix5fxxdppjfec7kkvliyqumegiqvcspnq6a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8b4c515313d99f78da8e522fd2dee37bd2520bea55568c428c21910a8a4f6c3c