MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39
SHA3-384 hash:	a7f9a6a68863b7e692d9e6dbbb2432736273756f57716e83381748c2bc1c4aa12f385109d1a1ecaaf3a5386b826fe056
SHA1 hash:	de06d5c9d2d2cdbca19f50bef54b7a56118f3491
MD5 hash:	9a62aee4823a63fa7a14763c6283c9d2
humanhash:	neptune-sad-papa-ink
File name:	l
Download:	download sample
File size:	914 bytes
First seen:	2024-11-21 21:51:03 UTC
Last seen:	2024-11-23 04:15:20 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:7XOTtvmZPuXOpqXYcGFyZow4+Fv9gEiJbmVLHeuET3VLHeuNK/VLHeu3:Twv53GFyZouRb+BZ+gA+M
TLSH	T11E11558894663D28B0B1CCCDE2B38C46BE04D57E5D591A407F8D847BCBAE600B055B8C
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

68

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30786.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6741c852d0583382434aafb0linux22vpnfull_triage

Tags:

trojan agent virus

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/673fab8354a358aa678d9de5/reports/ea5ab9b1-756b-47f7-a590-4322ab2d37f1/overview

Hybrid Analysis Trojan.Linux.Generic

Verdict:

Malicious

Labled as:

Trojan.Linux.Generic

Link:

https://www.hybrid-analysis.com/sample/d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3fy7rm4nwavw2unk2uwlw4z5jgyxkgtqtqnxl5574p44bbtc3u4q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/d971f8b38db02b6d51aad52cbb733d49b1751a709c1b75f7bfe3f9c08662dd39