MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b
SHA3-384 hash:	31a59f41a16b8cf7fcbe052cd08dd838abe17dc625f29eb0ec69f21ef0cae73532a26bc65cb23a2fa839bc026d47dc08
SHA1 hash:	b6b22466b011bace31062401d48d283a05388012
MD5 hash:	9fd2265f9e7c478056d80382f4057981
humanhash:	double-cola-four-two
File name:	169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b.sh
Download:	download sample
File size:	21'422 bytes
First seen:	2026-02-27 15:01:19 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	192:cCu2g6p4hvZ5m5FoKNpivFDFCrxIT+10DUwoKmjLaeOWO+8TRi/:Bbp4hvZ5m5FoKNpivFDQrxIT+10DUN
TLSH	T169A27E7621F04A33AA9055C4B3772BA14F72D65784A321B8B4FE1B359F59B0370FBA21
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

79

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/69a1b1c797feb4afd65f841b/reports/9dfbd3fb-aac4-4086-9db4-b2aecda725fe/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b

ReversingLabs TitaniumCloud Script-Shell.Trojan.Heuristic

Threat name:

Script-Shell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-27 15:01:32 UTC

File Type:

Text (HTML)

AV detection:

3 of 36 (8.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=c2pqfpoag7qbjxkrzm55upomp7rj5eu5kzv4vshodosdtj6dwnnq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-sd48yacs5c/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.