MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92
SHA3-384 hash:	687b25271650b453df4ab61366549a0e51ad4212c90abef747cbcdad9b3c533a8d6559069f096a42f976bf14950f5f30
SHA1 hash:	d7786d6fd4f1d73ce1f74e8bd995d86a11263ae2
MD5 hash:	4ab88df1be61f373ae3e178a67b43168
humanhash:	maryland-whiskey-eighteen-equal
File name:	brr
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	192 bytes
First seen:	2025-12-05 18:24:08 UTC
Last seen:	2025-12-06 07:35:35 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:LxAjtyg/yImWBFSHEom+bMUDbGBFgxAjtyg/yI8QGFSHEo8QLKwoVWLDbXxjKpXD:LA5/bm9E1+bpiBFgA5/b8Q9ErQLKwoVR
TLSH	T1B2C0C9E433063744804CB82620BA284A34B2CA0B1676877F8C40E031D044834F331E4C
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

32

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-05T16:37:00Z UTC

Last seen:

2025-12-07T12:20:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6bcwbwkekdmekinkr4lptfhyordflatiy2gq7akmdoobgbfuxkja._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251205-w85pqsep8w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f04560d94450d84521aa8f16f994f87446558268c68d0f814c1b9c1304b4ba92