MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042
SHA3-384 hash:	e49f483f4069f5bc2be104349bd1750944c3460a8de460288460fe203a93626b277a4380e3d2780ad91ca07e6e742965
SHA1 hash:	68ddc107c9779e6d85e5495a2c79f79080841307
MD5 hash:	4af7318c67c684acfc3f21c2da3ddf4e
humanhash:	california-paris-potato-seven
File name:	l
Download:	download sample
File size:	609 bytes
First seen:	2026-03-01 03:01:47 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:8q0HsOt1Vvhs8SOQHHRrsQ2nXMASo9g/g0tv7kYV0VyVIVs6X:8RHsOt1xhDSpNS8ASo9gI0tv7JmYCS6X
TLSH	T135F0D352B9557E159331C81E57C17A46173217F1BC58B93D54D489C24FB54C33166B60
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

106

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

base64 bash lolbin obfuscated

Link:

https://www.filescan.io/uploads/69a3ed9acd25bfe1dfdd1a48/reports/11cd86ca-cd40-467c-b3c4-d88931fbb7da/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042

InQuest

Result

Gathering data

Nucleon Malprob Benign

Score:

29%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ew3nro7ebl776xn2jtzaj3diowdhjbwyzxxr6i6f6tohb26webba._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260301-jh71ysc19b/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/25b6d8bbe40affff5dba4cf204ec6875867486d8cdef1f23c5f4dc70ebd62042