MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84
SHA3-384 hash:	12a0088c4e04c0fb82d96340c3ffc66a0a2ccd70395ab8c84454507b751f7b2bfd9831b35cad6912cf13aa95410edd42
SHA1 hash:	4598435e466c05de8d5317255504ba18df7e9bc9
MD5 hash:	bf824b309779306d1987419fabe6eb7c
humanhash:	burger-hotel-potato-double
File name:	massload
Download:	download sample
File size:	2'045 bytes
First seen:	2025-04-18 11:43:34 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:GIbTAHWaHwJGLpGxmcvtrHWjHw6H8pGxZ37csJRtoHGx5J3hsebucxj:jTEWKwIAWbwIwETR1
TLSH	T10341DED9D772FF26E507AF543101C701B88B9EB327824921DA9924F3C89ED243467A6F
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

58

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6802913c2203b3e10cd12d06linux22vpnfull_triage

Tags:

agent hype sage

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84/

ReversingLabs TitaniumCloud Script-Shell.Downloader.Heuristic

Threat name:

Script-Shell.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-18 12:49:25 UTC

File Type:

Text (Shell)

AV detection:

12 of 38 (31.58%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6xwm3udvhzrtaliacvcjuii2qjp4d3qlbxo43vhxuz2gz24nt2ca._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f5eccdd0753e63302d0015449a211a825fc1ee0b0dddcdd4f7a6746ceb8d9e84