MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736
SHA3-384 hash:	f8b54ce657d6bfd1e2ebd6a960c63b37ff7b8ee38f11da89fac136a81eaa66d51f51188a2e005f6e944702d31ae1dabe
SHA1 hash:	79967b7f645ff0d701b6d829a51d7e5396232e93
MD5 hash:	1a1703d229ab16d08e5f835996833192
humanhash:	shade-louisiana-thirteen-lima
File name:	wr
Download:	download sample
File size:	226 bytes
First seen:	2025-11-28 18:06:33 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/plain
ssdeep	3:L+iMITLGL68aGBzSEyLTUW2eHU0DiMITLGLjONBzSE8eUo9eHBSDiMITLGLFIQgy:LuI8pNIh00DBI8jONZ8EDBI8Fidna
TLSH	T137D0A79B355032458AC4DF02E56BAB2D3243C3CE94640BC878CD3032CDAC2187025F03
Magika	txt
Reporter	abuse_ch

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

25

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

InQuest

Result

Gathering data

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ynr2usnk5uemrwwu7egucirmzcjnzxq5td5uw65acunev6ef243a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736