MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7
SHA3-384 hash:	c32f1844d20407df5b5adc576597ea8b14b112869966401ac7f07c9d811a4af257b550b2a9d98eca81428c7755cce2d1
SHA1 hash:	661b9b99b157a3de68ce2f0527c0edaf70178631
MD5 hash:	50b3206339f7b3cbe2d6985184539778
humanhash:	nuts-diet-four-snake
File name:	23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7.sh
Download:	download sample
File size:	7'506 bytes
First seen:	2026-02-27 14:27:56 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCusB6n7sht+O+v1fsn+h4+tIicqbA/GsGqZ4BPqaF:cCuI6nC4hvZ5mzjHOf
TLSH	T10EF1D16B21F08B71D3D421C9526656A54E71A74B992A08B8F4BF933ADF2C90334E3F34
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-BPG.84894815.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/69a1a9fd97feb4afd65f71ad/reports/068616a6-6333-42d9-aed9-6d8aefa5e4cd/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/022d9e19-df04-4da5-bb21-3c6c7eae974f

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7

ReversingLabs TitaniumCloud Script-Shell.Trojan.Heuristic

Threat name:

Script-Shell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-27 14:28:18 UTC

File Type:

Text (HTML)

AV detection:

2 of 36 (5.56%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=en2i3a4o35b6x4jrfpfp3hvh2yllmunj3qzd7rovvos64pkjjxdq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-rs34rabs7b/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7