MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04
SHA3-384 hash: 629bc3576725b095f55cf749aee718835becdf25f0c282bf85064b628abe8f6d25f3fb856f48d57f5833c4bd7f7199a9
SHA1 hash: 588097c211bac8d8a5df0dac65a011211219ea4c
MD5 hash: aaf1ae55e98b16a14fce0e6cb64579ff
humanhash: robin-speaker-diet-mississippi
File name:sensi_av.sh
Download: download sample
File size:845 bytes
First seen:2026-08-04 13:44:35 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 24:Itm9jWhjWg5jWJFr7jS/Y7YLaWcfXsvofYOVfY1IYpYsYxYYg:b9j8jZ5jsnjS/IWcfXffnVBg
TLSH T1A001C0E6749285353F2D8B36EA191CC5F901082F08F521C8B20C99325E3CA786269F33
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
busybox
Link:
https://www.filescan.io/uploads/6a71ecf958f5074a04a22475/reports/073b9b68-ed51-4492-81e7-e36dcf13504e/overview
Verdict:
Unknown
File Type:
unix shell
Link:
https://opentip.kaspersky.com/b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04/results?tab=lookup
Score:
34%
Verdict:
Susipicious
File Type:
SCRIPT
Link:
https://malprob.io/report/b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04/
Threat name:
Script-BAT.Downloader.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2026-08-04 13:45:40 UTC
File Type:
Text (Shell)
AV detection:
9 of 24 (37.50%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wxyn7pt3ct5qweuorda6s2eaawiop3vhiqp4lezvict72fz4ruca._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260804-q2nvrasang/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh b5f0dfbe7b14fb0b128e88c1e968800590e7eea7441fc5933540a7fd173c8d04

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3895244/
  
Delivery method
Distributed via web download

Comments