MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058
SHA3-384 hash:	ca9484bd511f8c95eef4e91046fd60427cf21964244a72f19b750a866314f56a06fa62bc3527af7a26c2b900881d117d
SHA1 hash:	f2b0e699c1ede883d0d6dfdbf3fecd2964f9db44
MD5 hash:	e8867165d8930400a2d44781cc5c10f8
humanhash:	two-football-oregon-idaho
File name:	o.xml
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	708 bytes
First seen:	2025-09-30 21:55:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:FzY8id/7JAC7akxGWi2jX0KTk5ja+pt+VTEinv:FzY8k1/sWi2jkFj8Th
TLSH	T1460149ECA07CCB81099DC641B1F1501444B2D0C7B1F497E5F26E4825BF489993B2261D
Magika	xml
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

43

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.NetLoader

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.NetLoader

Link:

https://www.hybrid-analysis.com/sample/b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/4c44e008-fd38-43f5-b6bc-89725ffb5118

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058/

ReversingLabs TitaniumCloud Linux.Downloader.SAgnt

Threat name:

Linux.Downloader.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-30 22:10:44 UTC

File Type:

Text

AV detection:

9 of 38 (23.68%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wgvhahdrxvlqrq22l7a5lgvrwkmb4r7tfmbfrzfb7pjlqpcvmbma._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b1aa701c71bd5708c35a5fc1d59ab1b2981e47f32b0258e4a1fbd2b83c556058