MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5
SHA3-384 hash:	16b1c86fd764ba9ed482aeda4ae945e10240e1c51727209e5ff1c426b39069933fc785dad6e31f76b7dafca225253064
SHA1 hash:	d7ff7cd894279430d34dc4827b60e79528163203
MD5 hash:	b2bb34a4faa726c97b474534bc8a5097
humanhash:	florida-ack-apart-illinois
File name:	f
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	148 bytes
First seen:	2025-11-28 18:00:59 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:L6FTAJZDjeMITLGL68aGBzSEyLTUWaMjeMITLGLjONBzSE8eU5EQ9:L6FTAJZXFI8pNISQFI8jON5Q9
TLSH	T1D0C08CFA68906204C085EE46A266633E22C2C7CEA4040BCDB9CE2032CD88400B02AE47
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-28T15:59:00Z UTC

Last seen:

2025-11-29T01:16:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/f6a2ab9a-0753-486b-9e0f-2ddab3179f1c

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5/

ReversingLabs TitaniumCloud Script-Shell.Downloader.Heuristic

Threat name:

Script-Shell.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-28 18:11:10 UTC

File Type:

Text (Shell)

AV detection:

6 of 38 (15.79%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2m6xr3qe7ut6zue5b7hmamwax25ewqrxptj2tbd37outq5twu3kq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d33d78ee04fd27ecd09d0fcec032c0beba4b42377cd3a9847bfba9387676a6d5