MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d
SHA3-384 hash:	1938cb5bbb2093493dce9bf24b3c4483a58237a9f65294ae00565bf1519d7d8e9cb7195f230eb009148110d2d43b50a6
SHA1 hash:	dcb8cded18e96abee545ac55eeb9261d1880ab18
MD5 hash:	11e140110804b5816d2f2de488224839
humanhash:	ack-glucose-pizza-sixteen
File name:	dl20
Download:	download sample
Signature	DDoSAgent Alert Create hunting rule
File size:	3'654 bytes
First seen:	2025-07-20 18:59:57 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:ylOED8QVwQlJSXf79tLiJAYtDG/5OlnGM1f1:SZ/
TLSH	T1217194D902E203005001B74F3BF57B61AEB483E5AE7B0F8AFC99D97649B0A54F124F5A
Magika	shell
Reporter	abuse_ch
Tags:	DDOSAgent sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

27

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

URLhaus.3462419.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462413.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462403.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462409.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462416.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462399.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462402.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447675.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447676.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447679.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462417.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462395.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447674.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462404.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462410.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462418.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462407.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462397.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447677.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462398.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462400.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462415.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462406.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462405.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462401.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462396.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462412.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462408.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462414.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/687d3cd37bc45bdee1b26a3a/reports/e4e651c5-0976-4fea-b2db-6cbf856ea7fe/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/84da7523-4b12-40e6-9b31-d101fae6c9b2

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Vigorf

Threat name:

Script-Shell.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-21 01:24:00 UTC

File Type:

Text (Shell)

AV detection:

10 of 23 (43.48%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=x65zpxyyfjqb5p6rktglm2y4mnaesp53phn6o6exna2yblzdqkgq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/bfbb97df182a601ebfd154ccb66b1c6340493fbb79dbe77897683580af23828d