MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc
SHA3-384 hash:	ac9845f58053db8a40406255f23918ab8568fd804f3901f869a044f31b81a6da36cc3dd272d51a99614216f02a9d04f9
SHA1 hash:	e35e6a0244f8edeb9fe4af22db53655762ec6572
MD5 hash:	d0cf38716e43563331c02cf645ecd993
humanhash:	sweet-illinois-saturn-nine
File name:	sh
Download:	download sample
File size:	2'083 bytes
First seen:	2026-06-13 22:45:55 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:vkwvpihneZZn1oBydXSXtonmzEvJGU6ljiPq2MTCki:vkwYheZZK8A2mzIj6K
TLSH	T1DA4122BAF4628E3033ADC5BD748A654CA7579A6F491B2E74F087783C27BC32470742A5
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

70

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6a2dddc23d2a0c6df8ebcdbd/reports/c4cb83ea-800f-4149-aea3-916943afcd5b/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

Script

Link:

https://opentip.kaspersky.com/7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/0f988058-85d6-42d8-ab76-a33c32d1a392

Nucleon Malprob Benign

Score:

12%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7c8e7619c5398d3b857e6f72cf791e2c2e27762ddd8521eb8971c893cdb8b1fc/

ReversingLabs TitaniumCloud Script-Shell.Downloader.Heuristic

Threat name:

Script-Shell.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-13 22:46:41 UTC

File Type:

Text (Shell)

AV detection:

8 of 36 (22.22%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pshhmgofhggtxbl6n5zm66i6fqxco5rn3wcsd24johejhtnywh6a._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

discovery linux

Link:

https://tria.ge/reports/260613-2p542sas7w/

Behaviour

Enumerates kernel/hardware configuration

Reads runtime system information

Reads CPU attributes

Reads AppArmor ptrace settings

Enumerates running processes

Reads hardware information

Reads network interface configuration

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.