MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3
SHA3-384 hash:	8ccae73b52a15c975cdf245e5b04a5bb7f83235e0b8b5b772f132be9978b7f8ecc030db4eca329fb9ce6f44c225373e6
SHA1 hash:	024771648be60a0d2c128f140c6e9e4bafd44c37
MD5 hash:	37bfd105b84d9e199c118088f2e1473b
humanhash:	early-alanine-venus-emma
File name:	0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3.sh
Download:	download sample
File size:	11'082 bytes
First seen:	2026-02-27 13:32:42 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cAu1B6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj6YFWnR98b:cAuH6L4hvZ5mN9oKNpivYG
TLSH	T14932563B21F08B32D3C420C953A65B654E72A70B452614B9F4FE6739AF2DA0371E7B61
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/69a19d1b10e80629d4f54a4d/reports/a4036852-08bf-44e0-9ad2-e13f6f892259/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/22d6caa9-f3ac-4896-bbe6-001a6e26bfbc

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3

ReversingLabs TitaniumCloud Script-Shell.Trojan.Heuristic

Threat name:

Script-Shell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-27 13:33:19 UTC

File Type:

Text (HTML)

AV detection:

2 of 36 (5.56%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=b4zru7nuazu3mhm6quqs7dgukj37nprcecruomu3guk6mjgegczq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-qtmbysaw4a/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3