MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7
SHA3-384 hash:	a9f137ab8c09a753ca2ee0f48515455fd6cf073040a955967a96882d567e9baa24c566ebc2d34e1d383aadf526d3f415
SHA1 hash:	a80ee74c0b33531940f5272d6cfcb8df93331db8
MD5 hash:	947d5f6b7a9616a3ac243432ece7ea4a
humanhash:	alpha-island-potato-muppet
File name:	a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7.sh
Download:	download sample
File size:	12'981 bytes
First seen:	2026-02-22 13:20:21 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	192:cCuaC4hvZ5mZRcKNpivNbVWTxI1vgMrxl+XA:I4hvZ5mZRcKNpivNb8TxI/
TLSH	T12C42683720F08B32D7D011C9A3A21A614F72975B456724B5F4FE6729AF2DA0374EBB21
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

48

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive soft-404

Link:

https://www.filescan.io/uploads/699b03f7cd25bfe1dfd74afb/reports/53a24ae3-99d4-4abc-9876-7cd3a17f3d89/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6169368c-4651-4d9f-9c32-343507c73f92

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a89ea3b0e532d325f9e35d31b32f70fd3133b56e9bd9d5fc045b170df320b4b7/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-02-22 13:26:35 UTC

File Type:

Text (HTML)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vcpkhmhfgljsl6pdluy3gl3q7uythnlotpm5l7aelmlq34zaws3q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qmyfmsdw2g/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.