SUSPICIOUS — 20d3ab93bd112552323257e3fa7e096531d9ff69daf8b3cc807869e094e13efb.unknown

SUSPICIOUS — 20d3ab93bd112552323257e3fa7e096531d9ff69daf8b3cc807869e094e13efb.unknown is a unknown sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (47/100), attributed to the Shell family. 1 of 51 detection engines flagged it.

Identification

• SHA-256: 20d3ab93bd112552323257e3fa7e096531d9ff69daf8b3cc807869e094e13efb
• SHA-1: 9232d3291e30fcf1d6f1e6a554668de14916c4b8
• MD5: 4e1fb95534ca132dd4fc8bf4452a8b54
• ssdeep: 24:tuOBOTNITOXK7GO+5OTOVOOBOlO+7OyONn:t5M9Xm7qVZMw+SNN
• TLSH: T1DD14FFC5889BEC69849FC7847D5AD44CB8A07BC2D9722183E08274D5C51EB305F199FD
• Submitted as: 20d3ab93bd112552323257e3fa7e096531d9ff69daf8b3cc807869e094e13efb.unknown
• File type: unknown · Size: 1761 bytes
• Verdict: suspicious (47/100) · Family: Shell

Source: MalwareBazaar · first seen 2026-07-31T00:00:00.000Z · SHA-256 verified

Detections (1 of 51 engines)

• Kaspersky (KVRT): HEUR:Trojan-Downloader.Shell.Agent.cl

Why this verdict

The suspicious score of 47/100 is the fusion of 1 weighted signal:

• Kaspersky (KVRT) flagged HEUR:Trojan-Downloader.Shell.Agent.cl (rule HEUR:Trojan-Downloader.Shell.Agent.cl) - engine signal, weight 0.55, confidence 0.85

More Shell samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report