MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4
SHA3-384 hash:	6d12e0b2b28e4e108d47d8d92ba02d67461b228518b3cf3c8a652555f6777cd502231d78f0336380ca82c6929031c361
SHA1 hash:	0d8a66ffd60eb27b52bfb6faeede119740d4fc86
MD5 hash:	1db3e73ca525221c53ffdfb422bbef5e
humanhash:	grey-golf-equal-mockingbird
File name:	c.sh
Download:	download sample
File size:	936 bytes
First seen:	2026-07-03 00:15:56 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3Tm3zBxm3Tkm3xNIIpm3dKSKm3jT0m35uqaOm3pl9Am3f9rm3Dqxm3z/0m3rE4:FwBxUkGpqxKgT0cuqaOA9A29rAqxU/06
TLSH	T1B6118C8D02A05A3E6FFCCC6CB06FD208AC71E5C430B14F15DA64D42395A71606C15F3E
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

51

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

downloader mirai

Link:

https://www.filescan.io/uploads/6a46ff5d43576c5a165f56c6/reports/fd5b6784-0e56-4639-8617-2c039ca7c6e7/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/eb67134d-e81f-4800-9039-ce53b7655a88

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/0b0bf190c3d68ead801da7152302540fa34f2ca5d81c8263dd2da0b3faf0bdc4

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-02 06:20:15 UTC

File Type:

Text (Shell)

AV detection:

11 of 36 (30.56%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bmf7degd22hk3aa5u4ksgasub6ru6lff3aoiey65fwqlh6xqxxca._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260703-akqd9agy3x/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.