MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800
SHA3-384 hash: dc0d6f4487ea05266bca506617dcdd5e8de6a8bc677ca56c3da52cba815e205a9f5e486ffc92cc2da5b07ee813cadf74
SHA1 hash: 9f5990e9fa719d2f8dd1373cd2cb2abf905e0d9f
MD5 hash: cf5dc765efba775aca1fbe01633257ad
humanhash: neptune-burger-charlie-yankee
File name:1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800
Download: download sample
File size:10'305 bytes
First seen:2026-07-27 15:51:54 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 192:2mDK5StyuMUgOo5xWJlgLFqEIjreYpoJ6NYnDDz/puoe:2l6oWJlgLFqEIeYpoJ6NYn3zxuoe
TLSH T19022A470FC69C030379ACC6C96F79D801647261BCA993804B19DBAD5AF78078FDD057A
TrID 50.0% (.SH) Linux/UNIX shell script (7000/1)
28.5% (.PL) Perl script (4000/1/1)
21.4% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter Hassan_Pouladi
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
47
Origin country :
CA CA
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
busybox
Link:
https://www.filescan.io/uploads/6a677ecbbcc87ca12e85520e/reports/330534f1-92cd-4709-88c8-135f1a75ea21/overview
Score:
6%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=d377xcdmorluluybosvosm7shbpvu5fmxvrg2sry6nh36iap5aaa._file
Result
Malware family:
n/a
Score:
  4/10
Tags:
antivm discovery linux
Link:
https://tria.ge/reports/260727-tbdhwawzew/
Behaviour
Reads runtime system information
Checks CPU configuration
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.09
Link:
https://yomi.yoroi.company/submissions/1efffb886c745745d30174aae933f2385f5a74acbd626d4a38f34fbf200fe800

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments