MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8
SHA3-384 hash:	30908fc0ba62aeb496cee638e37255edab3d0a4f210b51dff041d1e241baeb3ef05e2bfc6096ddebeaaf841ddeb4ef4a
SHA1 hash:	7fba0f682eb9f2e75b27d91691fc11c434efc641
MD5 hash:	bc73955f75a526ed1bd27a2e438bc38c
humanhash:	high-solar-wyoming-burger
File name:	6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8.sh
Download:	download sample
File size:	9'479 bytes
First seen:	2026-02-22 13:21:32 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cLu7B6y6fOSwxkEgI4GKg+CIBcIBZIBDoYsEKEV/ENE0rEAEpuEFElCvd:cLul6wlXFX2lv+MDxX+r
TLSH	T18B12B57125F14C332A605A84B3772BA6ABB7D95385E3318C35DE2E256F87B02B1BF411
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/699b03a997feb4afd651da4f/reports/91c39c81-007b-4de4-a0ef-0237149603ac/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/01e0a773-6af3-4702-8ba1-62a0528937f1

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6be66a8360ccd4411b4216c875501b77a034e35a9a2888edb2910ce0689bd8f8/

ReversingLabs TitaniumCloud Text.Browser.Generic

Threat name:

Text.Browser.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-02-22 13:25:45 UTC

File Type:

Text (HTML)

AV detection:

1 of 36 (2.78%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nptgva3aztkecg2cc3ehkua3o6qdjy22tiuir3nssegoa2e33d4a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qpjehadx7c/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.