MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac
SHA3-384 hash:	7f8fc09a2278413ae6d1de7e0918231d121f0a74976a3fc5352a7877706ad1b708ba2e48d3475e6bceb49dc7c36bce86
SHA1 hash:	19cbffbf976f98eed6489fce285317274068e66c
MD5 hash:	201cd971b55e0c16c6664be2087ced5a
humanhash:	zulu-snake-july-quebec
File name:	cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac.sh
Download:	download sample
File size:	1'429 bytes
First seen:	2026-02-27 12:44:44 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:cnnRUR8fARVNvoslc9HHYbxtNuPl/Ha+iUyfEYul/HVeN:cnRu9RVJoslwnYbxaPl/BiUnl/s
TLSH	T1E621BB7021F148731D541940F23727A6AB73D85745D3614C34DE2F39AFA7B03A5BE012
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/69a191e910e80629d4f53f28/reports/8e650bf7-eb65-4dfa-b655-4d49d6f5ad0a/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/7a687c40-e5d3-457f-bcff-22034d3a484c

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac

ReversingLabs TitaniumCloud Script-Shell.Trojan.Heuristic

Threat name:

Script-Shell.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-27 12:45:38 UTC

File Type:

Text (HTML)

AV detection:

7 of 24 (29.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zonomdzlrrolzco4k4b4bhoolfwpqkbw55lvic3yyrizizkaiwwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260227-pzapnshz3h/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac