MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0
SHA3-384 hash:	827dc332da3fa9ffe2b7c46a228a6a8752211dec4028aa2f0d8fc466a4b9b80ec34d8331f01dbb32d8c3d914af384fab
SHA1 hash:	cf617fbe55dfdbd7c872d7acc824f5bb9c635707
MD5 hash:	6f58091a849a7c467af537ef24e2c513
humanhash:	ohio-idaho-beer-happy
File name:	675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0.sh
Download:	download sample
File size:	12'547 bytes
First seen:	2026-02-22 16:45:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjxlPOSEgXYUcFn0m0F:cCuhK6p4hvZ5m5FoKNpivOX6
TLSH	T11042337B21F08B3297D010C9A2771B614E72960B456624B9F4FE6735AF2DA0371EBB21
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

57

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/699b32eb97feb4afd6521081/reports/6780a89f-38ed-40e3-bcab-6577f42152e9/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6076f200-479e-4e35-bf27-9341d625dfb0

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=m5kjbomdaivbh7bze6fjsnznrk7ozoztagwecjjvgj67ymxsv6ya._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-t968vahy2a/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/675490b983022a13fc39278a99372d8abeecbb3301ac412535327dfc32f2afb0