MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae
SHA3-384 hash:	e0f0505862ddaed46cd7e42a9a399000e5b637ec6efcbabf30afc98597b1d5663a1d84340f8f9e56a3dc45cfdf00ca1f
SHA1 hash:	bad379473efbe31a128f2be2afade4b6f0114167
MD5 hash:	e95d6050431b86c0639fd10b0f5a2457
humanhash:	minnesota-quebec-december-potato
File name:	a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae.sh
Download:	download sample
File size:	15'721 bytes
First seen:	2026-02-22 13:20:54 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuolB6Lsht+O+v1fsn+h4+tIiKkC1ymyRyzuKNpUj4waYvjJlVv38Zo8zJwD6fW:cCua6S4hvZ5mN9i/KNpiv2ZkvsMQ+Vd
TLSH	T17562563721F04B3297D415C8A3671BA54F76A60B456724B8F4BE5B399F1DA0370EBB20
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

35

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive zero-day

Link:

https://www.filescan.io/uploads/699b03e510e80629d4ed303a/reports/3ba3fc6c-c4be-40d4-88a0-b57f00f2f0e1/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/a91bdad9-0eb9-46fc-baa6-afb61da56b1b

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/a2ec21c77fc0ad318efadc8a5accd1d0ed42ccc46b02a15f12a75b11c2ab8aae

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ulwcdr37ycwtddx23sffvtgr2dwuftgenmbkcxysu5nrdqvlrkxa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qnfl8adw7g/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.