MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4
SHA3-384 hash:	580ffa3cae50f6af0209e4956294cc2fc8a50cbe85f174ce5893ff0a94cb86d18c8739e745a6ca50d92975f3c978ad43
SHA1 hash:	9d208bd2fb18ef00c5da666bbea9af3613e474a0
MD5 hash:	2aedda2c4cd437d8ce56e6b76124c932
humanhash:	louisiana-quiet-speaker-mississippi
File name:	8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4.sh
Download:	download sample
File size:	11'958 bytes
First seen:	2026-02-22 13:19:29 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuO3B6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6+26fS6fE6fOK:cCuG6p4hvZ5m5FG4j4HKNphv3
TLSH	T1F232893721F08B32D3D010C9A2A61FA54F76A70B492614B5F4BE6739AF2DA4374D7B60
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

22

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/699b03c8cd25bfe1dfd74ad1/reports/92b93055-458e-4b0c-aff3-2cc6c820825b/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/4ef5ddf8-b2c6-4cd3-a7ba-45063b600ad8

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rfz3g5tk5jljjycr4kbrbnv6p7zunlrjlsbo7uqkewes235ubhka._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qlx4gsdt9f/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8973b3766aea5694e051e28310b6be7ff346ae295c82efd20a25892d6fb409d4