MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 abb735e212418de737c0f8027232e5a02400100eef7e41fd484a99e404db1adb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	abb735e212418de737c0f8027232e5a02400100eef7e41fd484a99e404db1adb
SHA3-384 hash:	f80602e5b789cec76a136e24d1ca8fc5a8b8e4fe2fb77482bc61633389edcdd75c0af19fde5fabe8facdaf1a4bbb320b
SHA1 hash:	29e64f2472739cf97bf1cb45438557f06d2acc1f
MD5 hash:	98c755bdd04a7928e457a644e026fd7d
humanhash:	west-arizona-blossom-idaho
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'269 bytes
First seen:	2025-04-16 11:13:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:8D+7UI7DD+CIxD+xICD+NI2D+fSIpD+hIyD+aIpD+5I3aD+xNIlIPD+fIwD+mINC:8D+7t7DD+XxD+mCD+i2D+fHpD+2yD+/8
TLSH	T1972130CD81E9EF108CB7DF60B822C179100698C0989E6F89D89CDBB296DDD34F241B49
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67ff93d3954c9c53de0bb9a3linux22vpnfull_triage

Tags:

downloader trojan hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67ff910190767142c3d707b2/reports/a5939b38-f6d7-4b3d-8255-86af7c0b685e/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/abb735e212418de737c0f8027232e5a02400100eef7e41fd484a99e404db1adb

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/abb735e212418de737c0f8027232e5a02400100eef7e41fd484a99e404db1adb/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-04-16 11:14:10 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vo3tlyqsigg6on6a7abhemxfuasaaeao557ed7kijkm6ibg3dlnq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250416-nb2b2sz1ev/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.