MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5
SHA3-384 hash:	9a92a9fab4820578c2b5ca2e2c4e5b1d9b731bed36ae552766ee7179602899b1e400eadd649838a713a4037ac5d41707
SHA1 hash:	3deb4cca51ff93d6b47063e4fbf672f3fb778228
MD5 hash:	aaa695b55d950dccf9a52b1ae4008e44
humanhash:	queen-beryllium-pip-steak
File name:	05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5.sh
Download:	download sample
File size:	9'049 bytes
First seen:	2026-02-22 13:15:53 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cRu3k0B6DsDzacxwxmkStgFIblbT/+Q9y9U9YIBVIBxIBmIBVIBhIBk:cRu0g6DjUpP//wy2CmJeev
TLSH	T11612D37125F14C332A20AA80F3772BA2ABB6D95345E7318C35DE2D265F86F12B1BF415
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

11

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/699b01a610e80629d4ed2e91/reports/7036f255-ee72-4ac1-891a-b6ae0898a40b/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/42b7d232-a0e5-47d4-9de2-880d577263ec

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ax2kgrr5a7ieqcffjaulqnpuufz33kxcnt2ut6mxr47d54sft3sq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qhy7dac16b/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/05f4a3463d07d04808a54828b835f4a173bdaae26cf549f9978f3e3ef2459ee5