MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7
SHA3-384 hash:	43ba4330da9546de1a7af9b6dd94bfb77dae5363c2e26dc05748f9414af4338d75c9f39015b9b4f9d7cc6128daaa0fa7
SHA1 hash:	e223219827a957b2823614fe30746439b03a167c
MD5 hash:	4167380fc4df8c0a49298bd89dbd67e6
humanhash:	nebraska-salami-pennsylvania-carbon
File name:	download-55.sh
Download:	download sample
File size:	2'677 bytes
First seen:	2025-09-03 05:07:08 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:S/0LJgLRgZWpVUHUM9npUP8gIj0CWpuwKjkQ0tpTYCFMzU8N+6evI+b+/AAICz3f:SMdgL+7B9npE/bXMCI+U7j
TLSH	T1E551D64E926137928F346F9C727A4C48800C96543CEF2E89FB6D9ADF161258770ABD0F
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

40

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68b7cd9039a6221faa7bd41f/reports/7bbbb778-2b5c-4fff-8806-13732884bd05/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

unix shell

First seen:

2025-09-03T02:27:00Z UTC

Last seen:

2025-09-03T02:27:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/10913454-dafa-41c6-bcb5-6d47854c5f44

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

17%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-03 05:09:29 UTC

File Type:

Text (Shell)

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=p7mo7ukaohqn7b62imayvsuvoxm2jz3yry33ut3jtqljeu5sldlq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250903-ftb6wa1px3/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7