MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b
SHA3-384 hash:	3e5cac833fa8f008f45b6b6bea214df0f7d297e4bb621b75127693dadaa5402ba7a6a548eaaa3b5108d2d6114587fae6
SHA1 hash:	a1f379055b735e4075f160779e90bab6c453f2c2
MD5 hash:	5f9d6066e2a207618635ac326390d6c6
humanhash:	shade-romeo-gee-apart
File name:	dl18
Download:	download sample
Signature	DDoSAgent Alert Create hunting rule
File size:	5'501 bytes
First seen:	2025-04-12 17:56:57 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:odEZ75CxW5NNclkHFShUjBpRdRXsIQxBfnLw3a6Ar5uvrRWREN/RCgfvlv+sihxx:JRA85CO9xo
TLSH	T1F1B19FCE02D541206442770F7AE5AF849D6883D1ECB70F9AFC98CEA96464DA8F539F1C
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

110

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

97.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67fb68c5d6e7c3effad1803blinux22vpnfull_triage

Tags:

downloader packed mirai agent

Hybrid Analysis Linux/TrojanDownloader.Agent

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.Agent

Link:

https://www.hybrid-analysis.com/sample/b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-12 17:39:56 UTC

File Type:

Text (Shell)

AV detection:

16 of 38 (42.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wafbjjnkamuu7grnyx36hsgb2mukq4ki6hesl5s4syderxnjxvfq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b00a14a5aa03294f9a2dc5f7e3c8c1d328a87148f1c925f65c960648dda9bd4b