MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb798a83053a721cc06063443dd848ccde93705acb6fee86cfd05fd79b68c41e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: cb798a83053a721cc06063443dd848ccde93705acb6fee86cfd05fd79b68c41e
SHA3-384 hash: b3eea6cfbac078cbe3ad14e9c4f40b573faa711016eecad8c8be0ac4f61abac89cefeace7856a216c4c1e023ff49896c
SHA1 hash: 124bc2d53794b52cca2d5a0c3884571470c19d26
MD5 hash: dd588d69b9ceaaac48371de2defa6303
humanhash: vegan-undress-papa-sad
File name:cb798a83053a721cc06063443dd848ccde93705acb6fee86cfd05fd79b68c41e.sh
Download: download sample
File size:11'748 bytes
First seen:2026-02-22 13:20:13 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 192:cCu6W6p4hvZ5m5FG4j4HKNpivJVsQCGCndITZI:fJp4hvZ5m5FGGoKNpivJWQCGCndIi
TLSH T15632883B21F08B32D3C020D9A3A61A614E72AB0B456614B5F4FE5739AF2C90375E7B61
Magika xml
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://95.214.27.141/av.shn/an/an/a
http://222.186.52.155:21541/sh/AV.shn/an/abash
http://60.250.143.121:880/ln/an/an/a

Intelligence


File Origin
# of uploads :
1
# of downloads :
32
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive
Result
Gathering data
Status:
terminated
Behavior Graph:
%3 guuid=42b46ad0-1a00-0000-75ee-4bb7850b0000 pid=2949 /usr/bin/sudo guuid=7006b3d3-1a00-0000-75ee-4bb78c0b0000 pid=2956 /tmp/sample.bin guuid=42b46ad0-1a00-0000-75ee-4bb7850b0000 pid=2949->guuid=7006b3d3-1a00-0000-75ee-4bb78c0b0000 pid=2956 execve
Gathering data
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh cb798a83053a721cc06063443dd848ccde93705acb6fee86cfd05fd79b68c41e

(this sample)

6f62167f649c5f698b409b90313d4774ae315604dc19a4279322ef2bfce84a83

  
Delivery method
Distributed via web download
  
Dropping
MD5 ced37376359e40861e83a118e4234423
  
Dropping
SHA256 6f62167f649c5f698b409b90313d4774ae315604dc19a4279322ef2bfce84a83

Comments