MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833
SHA3-384 hash:	5d2162368391687c078106ee63b813d7ccbc9a6aff00eb702a4b451137ca0f981c306c2bb79b91b3c54ad3eacd72ab5f
SHA1 hash:	0137b9fca5ff25ab4e9ba417a7b8ed5fcaa8b1b8
MD5 hash:	e7ffeed46b973582f0f8dd0abc78dad2
humanhash:	tennis-lithium-georgia-ohio
File name:	ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833.sh
Download:	download sample
File size:	13'198 bytes
First seen:	2026-09-17 02:39:16 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	192:cCuR56p4hvZ5mN9oKNpivvV6PFITVaHvNMc8F:W0p4hvZ5mN9oKNpivvQPFITVaHvNMc8F
TLSH	T12F42673720F08B3297D061C962771A614FB2970B456714B8F4FE5B26AF2DA0370EBB61
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

58

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6aab5312e980ebc75910966d/reports/d7fdfbd6-0a26-4fac-a6c9-a36da3b08757/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/aaefde52-99e0-4005-bd29-057c00d10c77

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vrf2wvvfzmakq7l73oir2fbadjipagrj4t5c74muplfz7y3avazq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260917-c513laxgkh/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

Executes a command shell one-liner

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ac4bab56a5cb00a87d7fdb911d14201a50f01a29e4fa2ff1947acb9fe360a833