MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d
SHA3-384 hash:	95f1653566cc24b87c285ba6bb6617ec96ea570aad63d8756deed960003db15efdfa055cc0fc4e247cc5062ac9e9086f
SHA1 hash:	88156d882a81ae6af326bd10c804ba6b2da6be86
MD5 hash:	78e5b7d1dc29bfe256f8c29fec1f555d
humanhash:	fruit-oscar-nine-alabama
File name:	run.sh
Download:	download sample
File size:	299 bytes
First seen:	2026-02-24 14:24:01 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:SrusxtbZxLlmWkFbJZbXLWBL2eeutJBC+n:Ou+tbf57kJnbXaAeeutDC+n
TLSH	T129E0CD48B135F7735571D3A95E82D55876F542116F163D0CC1F3049FDC52475B22CAB0
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

68

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/699dc138cd25bfe1dfd90f36/reports/4282fe6f-c697-4bb7-b630-8ee1183be079/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Suspicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

unix shell

Link:

https://opentip.kaspersky.com/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/376f68c7-e11b-4a8a-bd22-04e9d9b044dc

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

23%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bye7cl6f7wncvwnqwnhjbhho33yqrip4vod3rk6lz2jdwk2c7e6q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260224-spqjxscw6h/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/0e09f12fc5fd9a2ad9b0b34e909ceedef108a1fcab87b8abcbce923b2b42f93d