MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7ad240b1fb349d0513fc4ab467df09b256278a6c84c2d9709a8a488bc0e6e020. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 7ad240b1fb349d0513fc4ab467df09b256278a6c84c2d9709a8a488bc0e6e020
SHA3-384 hash: 5fce8bccef2cd54d433a6887e603728c35b824a34d1496a5ffcc9080a2ea59bca3f2085c35b8a698ee6e67cef8789a80
SHA1 hash: 375118265c87c2dc206f7ed66acd47e04741e2d9
MD5 hash: bd614564919de0be305d2634424c936c
humanhash: autumn-batman-leopard-double
File name:7ad240b1fb349d0513fc4ab467df09b256278a6c84c2d9709a8a488bc0e6e020.sh
Download: download sample
File size:5'639 bytes
First seen:2026-02-22 13:20:12 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 96:cLu3k0B6IKxGx5OgNeFmtm6IBkIB5IBu+:cLu0g6Nj81jGc
TLSH T199C1E77525F14C333A60AA80B3772BA2ABB6D95345E7318C35DE2D265F86F12B0AF411
Magika xml
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://38.6.178.140/easy_pass.shn/an/an/a
http://217.12.199.67/avtech.shn/an/an/a
http://38.6.178.140/easy_cloud.shn/an/an/a
http://154.9.30.146/srb.shn/an/aelf mirai
http://222.186.52.155:21541/sh/AV.shn/an/abash
http://222.186.52.155:21541/sh/5053.shn/an/an/a

Intelligence


File Origin
# of uploads :
1
# of downloads :
32
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive
Result
Gathering data
Status:
terminated
Behavior Graph:
%3 guuid=4cb898c2-1a00-0000-1cef-91f3ab0b0000 pid=2987 /usr/bin/sudo guuid=895658c4-1a00-0000-1cef-91f3b10b0000 pid=2993 /tmp/sample.bin guuid=4cb898c2-1a00-0000-1cef-91f3ab0b0000 pid=2987->guuid=895658c4-1a00-0000-1cef-91f3b10b0000 pid=2993 execve
Gathering data
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh 7ad240b1fb349d0513fc4ab467df09b256278a6c84c2d9709a8a488bc0e6e020

(this sample)

007f065e58d07a799a21a2849a3907334abca1a31392e638d9343126079ca9b5

  
Delivery method
Distributed via web download
  
Dropping
MD5 c488c5f8367ad4612d371973e8aed705
  
Dropping
SHA256 007f065e58d07a799a21a2849a3907334abca1a31392e638d9343126079ca9b5

Comments