MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034
SHA3-384 hash:	8b84bdc71aff49d162a288644472c8adc9963ee7a0b5f934198b269d63b60e2e330ecefd1d58363b67fd81c15ea8ae91
SHA1 hash:	5bce2e865477cddab7026f57fdefdcccf6d7b25c
MD5 hash:	50193974424019fd70e906e83c24cfa7
humanhash:	idaho-october-helium-butter
File name:	curl.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'410 bytes
First seen:	2026-06-23 19:10:59 UTC
Last seen:	2026-06-24 03:32:44 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:VB59HBqg5vFByqBC1IBdBnBdTcqBVBNB4bGBvf3ByClBkgByUT13BpuBW:rThzd7jC18DBdo6rTNxyCTy6x8g
TLSH	T121215CC813A067F38ED8D940B96399EDB06D04D77E1798E4A4084AE36F563C6FC1C36A
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

115

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/6a3ada694dca8c24a5966a78/reports/3bc68f4e-c5c3-4064-9c72-6b6692d6e1a0/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2026-06-23T16:19:00Z UTC

Last seen:

2026-06-25T00:36:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/aa2169a1-9fcd-4635-a27b-b3b1664edc3e

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034

ReversingLabs TitaniumCloud Script-BAT.Downloader.Heuristic

Threat name:

Script-BAT.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-23 19:11:44 UTC

File Type:

Text (Shell)

AV detection:

8 of 23 (34.78%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fiv56e2ja3ite6z3j4tahfkxjhnbkboaq5kuttm47cywvkm7ua2a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260623-xv9bfafx5w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2a2bdf134906d1327b3b4f2603955749da1505c0875549cd9cf8b16aa99fa034