MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2
SHA3-384 hash:	4e5603a8c2eaec49ea9431e0fd0a0d11a7199b5e3f0569b979997c9a49fd37e0dc76f69606b8015ff0ed6a5b1d9756da
SHA1 hash:	b66bd7f4744a16a941541d5ea8433d33bca53e6d
MD5 hash:	ca37633d2254279b0dfdbe515042380d
humanhash:	hot-monkey-magnesium-failed
File name:	9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2.sh
Download:	download sample
File size:	15'719 bytes
First seen:	2026-02-27 13:41:17 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuolB6Lsht+O+v1fsn+h4+tIiKkC1ymyRyzuKNpUj4waYvjJlVv38Zo8zJwD6fe:cCua6S4hvZ5mN9i/KNpiv2ZkvsMQ+j
TLSH	T17B62663721F04B3297D415C8A3671BA54F76A60B456724B8F4BE57399F1DA0370EBB20
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

64

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

InQuest

Result

Gathering data

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

Link:

https://opentip.kaspersky.com/9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2

ReversingLabs TitaniumCloud Script-Shell.Trojan.Heuristic

Threat name:

Script-Shell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-27 13:42:29 UTC

File Type:

Text (HTML)

AV detection:

3 of 36 (8.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=tiidxpvimh2w2gshjffelkkjnkxtvz56hvwod7dxh4vbni7a2sra._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-qzr5dsax2a/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.