MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed
SHA3-384 hash:	15997e84d2a641b9b8d7da3a1b641698d771e35d6e09afb8c5f89d9ac88ea41aacad2f3d88bb1d722406857e39166697
SHA1 hash:	5ce689d022f838611b5e535c1b0023340e9cf198
MD5 hash:	ff1a30ba8681f816f626ffb8fce1038f
humanhash:	hotel-pizza-friend-robert
File name:	c.sh
Download:	download sample
File size:	6'771 bytes
First seen:	2025-12-10 15:34:32 UTC
Last seen:	2025-12-11 06:21:08 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	96:hErJBcVJhWd0hJRkEm+f4MgNJ6Kakm3A1+tR7uzfqpTtyAgv:OzsJXhp5cAqHy9yW5jgv
TLSH	T15ED165257C09A870120D8DB598BE3C64B516A28FC2419C4DB93E45F80F767A8FDBE49E
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

42

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

unix shell

First seen:

2025-12-10T13:40:00Z UTC

Last seen:

2025-12-10T14:17:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/107669a1-d435-483f-acfa-36bed94035f3

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-10 15:35:38 UTC

File Type:

Text (Shell)

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2l3wh52y2gw4u2n3za62znc22ugm6vyhrzbbsfx56omw4tjmz7wq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery linux

Link:

https://tria.ge/reports/251210-s1k4kstkgv/

Behaviour

Reads runtime system information

Writes file to tmp directory

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d2f763f758d1adca69bbc83dacb45ad50ccf57078e421916fdf3996e4d2ccfed