MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d254df8e3edee032aaa3e40e845fa351154a031d3fe1fe68cf36d02bab71d51e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d254df8e3edee032aaa3e40e845fa351154a031d3fe1fe68cf36d02bab71d51e
SHA3-384 hash:	eaaecd716cbcf42ffc5444371c700b015d5727bf349e57a6d8148bb6258bd359170db55ac6bc1bbbc22eef9eba6a86e5
SHA1 hash:	8d17470b1e66d9f02a6a1846ab5f8b7757f102b3
MD5 hash:	ae0777bcb35ab8267b4f374530bd2559
humanhash:	uncle-skylark-arkansas-beer
File name:	x
Download:	download sample
File size:	356 bytes
First seen:	2026-06-20 15:03:34 UTC
Last seen:	2026-06-21 06:55:55 UTC
File type:	sh
MIME type:	text/plain
ssdeep	6:ebgy3yj3w5/KjoWXAsjbFPAjnQtDWQiTa9jwrObhgkhxn:myjWKrvRVDWTWldgWxn
TLSH	T102E0D8D790D99834308B8EFA7F2EC82019C2EA420A411D0858C619F3904CDD83167F71
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

369

# of downloads :

4

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2026-06-20T12:34:00Z UTC

Last seen:

2026-06-20T12:43:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d254df8e3edee032aaa3e40e845fa351154a031d3fe1fe68cf36d02bab71d51e/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2abc2354-d1b8-4cb1-9ab2-3789d2768647

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/d254df8e3edee032aaa3e40e845fa351154a031d3fe1fe68cf36d02bab71d51e

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script-BAT.Downloader.Heuristic

Threat name:

Script-BAT.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-20 18:10:03 UTC

File Type:

Text (Shell)

AV detection:

5 of 24 (20.83%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2jkn7dr633qdfkvd4qhiix5dkekuuay5h7q742gpg3icxk3r2upa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.