MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48
SHA3-384 hash:	980f1909ea7f5c9179f01a64ac7ea91d6045c73ced3b8c92a398d1414379430cd408fd5f972380be9d5cc07a05aee310
SHA1 hash:	aa7885303fbca2cac1a35cb307f5bb49456c0cce
MD5 hash:	fd7f61eb110b8a621faa042f41ad8698
humanhash:	fifteen-friend-single-cat
File name:	1sh
Download:	download sample
Signature	Tsunami Alert Create hunting rule
File size:	2'638 bytes
First seen:	2025-03-01 04:07:15 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:yfagLayZgQgUH9jUcjFgag+oKN+WGBwXfyIa:yHXEL
TLSH	T1D2519EED56361C5478F90D2B32BB0860E2DFE6C810D9DB58A1D6A9F085FC534F092BAC
Magika	shell
Reporter	abuse_ch
Tags:	sh Tsunami

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

563

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c2ddf62dfba428b46f7b57linux22vpnfull_triage

Tags:

ransomware agent virus

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67c2882ff8726576332bf54c/reports/12798a96-0a52-442c-ab78-822c00aac21b/overview

Hybrid Analysis Downloader/Bash.Botnet

Verdict:

Malicious

Labled as:

Downloader/Bash.Botnet

Link:

https://www.hybrid-analysis.com/sample/4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48

Nucleon Malprob Malware

Score:

74%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48/

ReversingLabs TitaniumCloud Script.Browser.Heuristic

Threat name:

Script.Browser.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-28 09:09:04 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jksf2yrg6lvkygeoeuytjp2lckt447mpsft6yr322o6ihkh6vnea._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4aa45d6226f2eaac188e253134bf4b12a7ce7d8f9167ec477ad3bc83a8feab48