MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b
SHA3-384 hash:	610f6c191a29582c45456851cd04d36bb0140fc15fe052fae53d359b04f8cfe192bd8929ac13d60d79cf55b6048fefd2
SHA1 hash:	517293d99c9e8b3afd14f41e0c8740a9fd97bf85
MD5 hash:	4526d2f95b1b405ae200cff8c28f6218
humanhash:	king-massachusetts-tango-football
File name:	chk.sh
Download:	download sample
File size:	4'674 bytes
First seen:	2025-08-14 16:54:26 UTC
Last seen:	2025-08-14 23:04:46 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	96:McWYY+7Ez9tjJs0QyLQduODzc0QVZME2XJXuJTcviAkER0x0yqV49tEE+2xMjvWL:TQDJ5LQoODIZWQ6viZYw+fTje
TLSH	T176A1C52B7C942B32152E82E4B49B60C2A74E802B623C7C34FFE091913745965AAFF12D
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

21

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

fingerprint

Link:

https://www.filescan.io/uploads/689e14dd397fd3ce6fa98f8b/reports/70a6e51b-2994-4020-9b42-feee74622f2c/overview

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=snudjlyob73okzh3uf42drhnjegsmnsu5azse2lwttegc5indnvq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

antivm discovery execution linux

Link:

https://tria.ge/reports/250814-vetvpsxms7/

Behaviour

Software Deployment Tools

Enumerates kernel/hardware configuration

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Checks CPU configuration

Looks up external IP address via web service

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.33

Link:

https://yomi.yoroi.company/submissions/936834af0e0ff6e564fba179a1c4ed490d263654e8332269769cc861750d1b6b