MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f
SHA3-384 hash:	a3d2f5b2208e2dc9444bbc1356b13148c7d35d8fb88c0b7504284df20e79f84d5d8bc7ce0a0ddf559b54db5d8af9d29f
SHA1 hash:	0e49da263c6305514d158cbbd7037150ec633d6d
MD5 hash:	4fb3c42bfea37566e20b2a09a5472d5c
humanhash:	potato-paris-maryland-illinois
File name:	o
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	98 bytes
First seen:	2026-06-04 10:02:28 UTC
Last seen:	2026-06-05 09:25:31 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:L0KDQNUCpLGDUWTzmVFGBzSEyLTUWOevn:LzDWZGDUWTyeI5v
TLSH	T101B0126734B83004C8087C08A8726F5C916786C3385C0A0892F60721CC541187C80F08
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

29

# of downloads :

22

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6a215933e05d89b36140834d/reports/dd05d62d-16fd-4267-ac81-69f136d25d33/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2026-06-04T08:10:00Z UTC

Last seen:

2026-06-06T05:49:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/9ebcfdd5-24f3-4a6c-96e7-a874c0acfe1c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f/

Neiki Malicious

Verdict:

Malicious

Link:

https://tip.neiki.dev/file/a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f

ReversingLabs TitaniumCloud Script-BAT.Trojan.Heuristic

Threat name:

Script-BAT.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-04 10:44:54 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=uwb7gogwofd37wbbhr3e3bg6ba5syoknyblzv24mjwvcvrg3onhq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260604-my9q9scy8w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/a583f338d67147bfd8213c764d84de083b2c394dc0579aeb8c4daa2ac4db734f