MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7bcafceddefcdb190f5c2bd6967d78e56a04c1e49db31eeacfde8c085cd24344. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7bcafceddefcdb190f5c2bd6967d78e56a04c1e49db31eeacfde8c085cd24344
SHA3-384 hash:	29a8709af6249fd4c8abfc3bfb15587038b94d8ab97c1b46ac11f7bbe0ec69a2cc89daa058e47418d0b31c1f63e11f13
SHA1 hash:	3c8898ce585ba03ef75cea921556aed7a94b8328
MD5 hash:	2991b3b2d1b23797445fd1751c811a3b
humanhash:	equal-table-monkey-burger
File name:	v3
Download:	download sample
File size:	1'045 bytes
First seen:	2026-10-18 13:54:58 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:URDFryp7/AylFh0ykczrynAOry0AbZdERW22Rvpyy:UlFe7/AikQUB3KHj
TLSH	T1C311C055B96272399423DD1AE3104B8A574003E27D8C983FA5F551A61F7CC83F5CAF86
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

77

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

base64 bash lolbin obfuscated

Link:

https://www.filescan.io/uploads/6ad4cfcd8f32a204f3d48920/reports/6abb08ff-72f6-4520-a109-148cb219caba/overview

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/fb08e2b3-2235-453e-be43-8b06cfb916fc

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7bcafceddefcdb190f5c2bd6967d78e56a04c1e49db31eeacfde8c085cd24344/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ppfpz3o67tnrsd24fpljm7ly4vvajqpetwzr52wp32gaqxgsinca._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

antivm defense_evasion discovery linux

Link:

https://tria.ge/reports/261018-q79dmsz1cz/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Checks CPU configuration

Looks up external IP address via web service

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.28

Link:

https://yomi.yoroi.company/submissions/7bcafceddefcdb190f5c2bd6967d78e56a04c1e49db31eeacfde8c085cd24344