🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc3aa6927c8dd757130831d47d48a0d1ca8dc1d7d7f937eadbb4928cc07b721e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: dc3aa6927c8dd757130831d47d48a0d1ca8dc1d7d7f937eadbb4928cc07b721e
SHA3-384 hash: 2e92c64c96be0e04cee0a205bd23dc8f3141ff069fcaff2c53ddbabd101010d7ace8f4ef09cdb0dd2672fc7dc065462f
SHA1 hash: 242a96eb283f20e320c662dff6cdd02350bf3cdc
MD5 hash: 8d81b577ae47fb778ba3700569bd1f72
humanhash: oklahoma-robert-ohio-oranges
File name:dea8ad4a4ea6f39133f9794c1a6dcc2be30013515340e62bd49d38e7823afe21.zip
Download: download sample
File size:26'672 bytes
First seen:2026-10-12 08:56:26 UTC
Last seen:2026-10-13 09:04:15 UTC
File type: zip
MIME type:application/zip
Note:This file is a password protected archive. The password is: infected
ssdeep 384:J5HsTFtZtsvXf+8lcvk014NTl6W+AI4R4Qe6T7W5AduUM8dnw8mjZfBHieP:rsLePRGvk014tlfldRlRWyNZdnw8+fii
TLSH T110C2F1BA1154B04CFD980DF18A1E3CFA15A7376EB0ED78B141DB9F780A70534687A4C5
Magika zip
Reporter DarkDataLabs

Intelligence


File Origin
# of uploads :
2
# of downloads :
102
Origin country :
US US
File Archive Information

This file archive contains 2 file(s), sorted by their relevance:

File name:run
File size:96'225 bytes
SHA256 hash: a48d12de9310cc164491c519b9427fa84e2cd2ba03f024602e9aea2136114deb
MD5 hash: 8b8e0268b482c39ccd481c73cefc371a
MIME type:text/x-shellscript
File name:init2
File size:713 bytes
SHA256 hash: 07e3060d67a7afb8a6ce14ca4e183bfa9436a28d2608b4e736a1278fd7a7d447
MD5 hash: f34e5bdf60d3c86facf84d899b6ae974
MIME type:text/plain
Vendor Threat Intelligence
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
Zip Archive
Result
Malware family:
n/a
Score:
  4/10
Tags:
linux
Behaviour
Changes its process name
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments