MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee
SHA3-384 hash:	7035027178f3d06ebae60277d08509ae26e728ada575cd087328c4f5010e1465d6d6193ffc9b3d3f1c68c4cd8ad9855f
SHA1 hash:	204ac721979577f45194713d9d5e75b2ebf7ee5a
MD5 hash:	920f757ec49146da1bb984f7f956ae88
humanhash:	spring-tennis-tennessee-stream
File name:	l
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	427 bytes
First seen:	2025-11-28 18:34:19 UTC
Last seen:	2025-11-29 09:22:32 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:hYVJXOpkYoANcfQapeRijAHIrnDF9aqYehKPLmlYyD7zVHz16GIYWa531B+4n:+nXOprDD5RBIbEecDxyxzsGVW4vn
TLSH	T172E05CAC95B08C3CF05AC43870FA5140B415CF538935DA1874575CDE94EC506B12CE67
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

22

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.SH.Mirai.C.gen.Camelot.4784.30238.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-11-28T15:45:00Z UTC

Last seen:

2025-11-29T09:12:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/4de9a549-e38b-4ea5-b373-e995f45ce2e4

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=v4kbjaygjyi2ofnavvko4dwvuwglrlwt7kqiitfmdpx5vm2vl7xa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.31

Link:

https://yomi.yoroi.company/submissions/af141483064e11a715a0ad54ee0ed5a58cb8aed3faa0844cac1befdab3555fee