MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 45b5e91f8a85f5ff1bdd5281f2ebc93d338f6dc82356000af4c5bbc20e1733ac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	45b5e91f8a85f5ff1bdd5281f2ebc93d338f6dc82356000af4c5bbc20e1733ac
SHA3-384 hash:	32d39eb3c26d0c06f4c2e7c277b93fe968a4e62ee56647a1e198b03be4d4c88ecb54916585c3ae3e0e5c20fdda227217
SHA1 hash:	41c85fd450d9be27421afd4529c0bc895e5ae645
MD5 hash:	9f595de31823c87cb9f56b9aef2928ac
humanhash:	alaska-wisconsin-iowa-solar
File name:	busybox.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'175 bytes
First seen:	2025-06-15 21:53:38 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:jcskGDcsl0DcsQGNIxy/DcszXKnDcsy4DcsP8DcsWADcsyyZDcsrQlDcsQKDcsd7:jdkGDdl0DdYwDdzXsDdy4DdP8DdWADdI
TLSH	T16A213DFE005CF9044A4D9E59F1256E28BE48CAD470E58A8CF54DD4B2E2AEC28613CE0C
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

N/A%

Link:

https://cyber-fortress.com/docs/result/index.php?id=684f411807b5e8c1cfe6da0blinux22vpnfull_triage

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/684f4117fd02ed5e05abdba6/reports/ed176eee-4e78-42e4-8896-c45b7b40fb4e/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/49a85d54-405d-4f62-98c6-dc7c0cd10af2

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/45b5e91f8a85f5ff1bdd5281f2ebc93d338f6dc82356000af4c5bbc20e1733ac

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/45b5e91f8a85f5ff1bdd5281f2ebc93d338f6dc82356000af4c5bbc20e1733ac/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-15 21:27:14 UTC

File Type:

Text (Shell)

AV detection:

15 of 37 (40.54%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=iw26sh4kqx276g65kka7f26jhuzy63oienlaacxuyw54edqxgowa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250615-1sdzassrz2/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/45b5e91f8a85f5ff1bdd5281f2ebc93d338f6dc82356000af4c5bbc20e1733ac