MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c
SHA3-384 hash:	a4498f7e4a59ae6a85c8b7540e1808964f7cfc1db66a30ce60cad3da8d72f3eeafc0b3bbd51e34e4b51e20b3790a3676
SHA1 hash:	14d81f7cd3c78ab3d15ed06823319fdbe2434e3b
MD5 hash:	3498b3d8022179a6c872d2228120411f
humanhash:	mockingbird-red-maine-colorado
File name:	massload
Download:	download sample
File size:	1'944 bytes
First seen:	2025-12-01 16:44:20 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/x-shellscript
ssdeep	24:z5EMy0MBDCeJ8jE6P1iI3SKXRCyCeyJ3G3oiLi6UgHgugHgivBcBSKXV6/K5m58z:z56VCeaODkCNKNHSH9Pou8GPi
TLSH	T12B4197EAA8A16F735D81EF0870230F1D600FA5C656910BADDF6E2C39FEBC90E7014645
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

26

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c

InQuest

Result

Gathering data

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vhvewdthgbuktsbcfw2r3ymdwvx4d3iqqofa3vxvgdh74abxyuwa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.