MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c792b032fb1f71205f9f3caf58437f8525d99ffca1530511c86ffd92fd22413b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c792b032fb1f71205f9f3caf58437f8525d99ffca1530511c86ffd92fd22413b
SHA3-384 hash:	3c14c91e49df1663edc6cc1f9d29e93d74c7e5d4a6bbb0b1e3b8d5915415331e492ef694f175f171eafc561cafd922af
SHA1 hash:	7960f2227633a66a1ba197e8074e1949bbc9065b
MD5 hash:	915bfc96306d854889017eda91ce1343
humanhash:	illinois-potato-lima-july
File name:	o
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	94 bytes
First seen:	2026-07-17 23:09:25 UTC
Last seen:	2026-07-18 19:04:53 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:KYyM+KDQNUCq+DKT7GBzSEyLTUWOvn:JyMI5WeII
TLSH	T1D2B0129B606120C0DE48BC00146B0F1D224347C234694E0C5CE02671CC985047870D09
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

443

# of downloads :

17

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2650.25817.22141.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/c792b032fb1f71205f9f3caf58437f8525d99ffca1530511c86ffd92fd22413b/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/34a2a15c-7695-4319-bbc6-0bd8d7e760f4

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c792b032fb1f71205f9f3caf58437f8525d99ffca1530511c86ffd92fd22413b

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script.Trojan.Heuristic

Threat name:

Script.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-18 04:03:28 UTC

AV detection:

8 of 38 (21.05%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=y6jlamx3d5ysax47hsxvqq37qus5th74ufjqkeoin76zf7jcie5q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.