MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120
SHA3-384 hash:	61ef0deac83d7abee503fcd0b94c35d87621cfed1f9796a6de6a0801697be568807ce5890dab871db621397d37363305
SHA1 hash:	016dbb6e84bd4bf4ea65b32dfa329e6d54c99ed3
MD5 hash:	9d7d0f73eb7ef174dc379655a52f8441
humanhash:	burger-white-quebec-beryllium
File name:	bbc
Download:	download sample
File size:	508 bytes
First seen:	2026-03-12 20:37:26 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:hLgjJ5Ja/+YcLN7+Y3JMF/+Ye0IdyJ44LIXLoO4eGLw+v+YdF/vNnQz2JMIykwFG:lSjkOLZpqjW3bo/8pqF82Q/NiT+XLQ
TLSH	T1A2F0270FA04BF03AD04019E8AB61FB6AAC30B86B6263CE8C78407A10FFD74347862640
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

109

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2531.28121.12259.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

Link:

https://opentip.kaspersky.com/c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/9019de25-e4f9-40b0-b675-c3ab832da45d

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

30%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120/

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-12 21:14:11 UTC

File Type:

Text (Shell)

AV detection:

11 of 38 (28.95%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ymeoe5rwmy5sqbuy3w4t66y3keyvtxzalcskg7oduny4od35seqa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.26

Link:

https://yomi.yoroi.company/submissions/c308e27636663b280698ddb93f7b1b513159df2058a4a37dc3a371c70f7d9120