MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87
SHA3-384 hash:	095bf3b17b35186db1dda2e8b40ab8258a56db0503d94e9f18a7c631341958e89f9cc521999b8b21592a5371c75560ca
SHA1 hash:	31fabf8e43a6910bb3c5149ee389e60724f0262c
MD5 hash:	e915d097138127436a0baf20a76656c0
humanhash:	earth-west-south-happy
File name:	.shell
Download:	download sample
File size:	214 bytes
First seen:	2025-01-30 08:41:29 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:QnQzanFCKl2X4HMiOQX4hgEydQX4hgEWqR6QX4hgENSLM9Kd:lOnFflHM3QIWEydQIWE4QIWEwM9Kd
TLSH	T180D0C9C9B05174B09CC889BA25E1B4016053F1D5ADD80F988BD8B990C84CE0DB049F45
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

73

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

95.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=679bba0c02140668e2cd1468linux22vpnfull_triage

Tags:

gafgyt hajime mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/679b3b5eac8b38d9947eb9de/reports/0e82b1bd-ec27-4dd4-9612-4d1d79b1ee97/overview

Hybrid Analysis Linux/TrojanDownloader.SH

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.SH

Link:

https://www.hybrid-analysis.com/sample/a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

18%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87/

ReversingLabs TitaniumCloud Script.Trojan.Boxter

Threat name:

Script.Trojan.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-30 11:30:26 UTC

File Type:

Text (Shell)

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=us6vucaumjxgilkfvtesxqwm3lxl2nmwrgzdanfa3cg7nnwvx2dq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/a4bd5a0814626e642d45acc92bc2ccdaeebd359689b23034a0d88df6b6d5be87