MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2
SHA3-384 hash:	498d3639fd973b0186eef79da02ca7219abca0e0f84d442f28955a9c7af7a51856c193711b58c877452c942a946c8b77
SHA1 hash:	30eae5b906d071fa02c9086c56d8529738d5e773
MD5 hash:	c4b54d343ef2b94792770dbee9bc63d5
humanhash:	texas-connecticut-hamper-papa
File name:	x
Download:	download sample
File size:	196 bytes
First seen:	2025-11-28 18:17:27 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/plain
ssdeep	6:UrmDoSuFXy4SOmDoSuFXyD+e2c6FTHVvSuVgusv:UrmMSGmMSdA1vMusv
TLSH	T163D022AE44082430F0CEB2F23A17C74C80208BC228220870E898C438CC889382C32E80
Magika	shell
Reporter	abuse_ch

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

26

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2

InQuest

Result

Gathering data

Nucleon Malprob Malware

Score:

94%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xlc2gsa46g6br2jbjp47gaupfa2udv4rw7mf6wtwvibrq7pdcdra._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/bac5a3481cf1bc18e9214bf9f3028f283541d791b7d85f5a76aa03187de310e2