MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0
SHA3-384 hash:	e4dee43c80896cfc0dd4b43f1b546c1025bec418a3f814ee3b8e251c4b8644b7fce696ad30e47d9d5cd556ff243fa657
SHA1 hash:	96a7d728e4dba9efe77ad0851297da43ba6773be
MD5 hash:	df2516bc442d559b89096fd5897c3663
humanhash:	east-early-yankee-finch
File name:	27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0.sh
Download:	download sample
File size:	9'770 bytes
First seen:	2026-02-27 13:36:55 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvj2Cp+is:cCul4hvZ5m5FG4j4HKNpivu
TLSH	T11B12443B21F08732D3C410CA53A65A654E72A70B852614B5F4FEA33AAF2C90731E7B65
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

66

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/69a19e0bcd25bfe1dfdbebd3/reports/e500121c-ef9c-43a1-b5f2-f594b1fcd7ef/overview

InQuest

Result

Gathering data

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-02-27 13:37:31 UTC

File Type:

Text (HTML)

AV detection:

2 of 36 (5.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=e76v3omdr4baq6gtxmsdaupsshhn4e26r2b2icdsc3ml4lacthya._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-qwxkpsaw6d/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.