MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe
SHA3-384 hash:	881dda9c504fb0ebcd9bd77e38711220824baa63f4b420013c700d240f939644c641fe0f93f7732a0b0b3d9e93ff68ec
SHA1 hash:	6416334e0abd2b2840d260d91e31b47d66f72b6f
MD5 hash:	1db17672077e1254cedd5e17e8a83a80
humanhash:	gee-uranus-salami-kilo
File name:	dl200
Download:	download sample
Signature	DDoSAgent Alert Create hunting rule
File size:	3'683 bytes
First seen:	2025-07-20 17:54:18 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:yroCVWyVOGDnSXf5DtJkvm+D5Id7kLZIMVx/:q73
TLSH	T19A71A8D942E20300A101B64F3BF57B61AD7483E5AE7B0F89FC99C97A5870A54F224F5E
Magika	shell
Reporter	abuse_ch
Tags:	DDOSAgent sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

23

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

URLhaus.3462419.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462413.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462403.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462409.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462416.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462399.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462402.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447675.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447676.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447679.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462417.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462395.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447674.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462404.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462410.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462418.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462407.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462397.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447677.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462398.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462400.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462415.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462406.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462405.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462401.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462396.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462412.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462408.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462414.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/687d2d527bc45bdee1b2637e/reports/021faaaa-a741-4fb3-bff5-5dde2b290630/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/d74522a7-70f9-4a9e-8122-500a2e142751

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Vigorf

Threat name:

Script-Shell.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-21 01:24:00 UTC

File Type:

Text (Shell)

AV detection:

10 of 23 (43.48%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rrm3c4uasoomwfwimk2524x2wtkqudy72esxp433w475x24cr27a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8c59b17280939ccb16c862b5dd72fab4d50a0f1fd12577f37bb73fdbeb828ebe