🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb5fa5a488ac0ae34080daaa79ab37844bcbd9dfd374d6f9e1e9118245a8b3c7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: cb5fa5a488ac0ae34080daaa79ab37844bcbd9dfd374d6f9e1e9118245a8b3c7
SHA3-384 hash: 83a97df92b49f9d4622c5bdb44102a7ff3efacc29258bd01006839e8cc6367ada42e9f743b6dbced8d5713b087b4ebe1
SHA1 hash: ff2fc0c6330daca16eaaa8fe91cb9b5a80eba195
MD5 hash: 264df0349838878e6a342635b4c6aac6
humanhash: hamper-speaker-autumn-alanine
File name:cb5fa5a488ac0ae34080daaa79ab37844bcbd9dfd374d6f9e1e9118245a8b3c7
Download: download sample
File size:2'707 bytes
First seen:2026-11-12 14:15:09 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 48:92ZPnWGmH6TMV5m11QU7dXCWQgxxsXuHtpyBMbtKxxsDBV/BkH5:92Z/WbZnm11LdyWFxKXuHtcBMbtKxKDc
TLSH T1A7519324A61766308F8B0567A6B7B3839183A6AFC559F032340C53E83FDA25EA1F2914
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter beserko
Tags:sh

Intelligence


File Origin
# of uploads :
1
# of downloads :
64
Origin country :
US US
Vendor Threat Intelligence
No detections
Status:
terminated
Behavior Graph:
%3 guuid=2321166c-1e00-0000-e217-c35b640a0000 pid=2660 /usr/bin/sudo guuid=b693cf6d-1e00-0000-e217-c35b650a0000 pid=2661 /tmp/sample.bin guuid=2321166c-1e00-0000-e217-c35b640a0000 pid=2660->guuid=b693cf6d-1e00-0000-e217-c35b650a0000 pid=2661 execve
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery linux
Behaviour
Reads runtime system information
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments