MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3
SHA3-384 hash:	334b21b4e2b9787cdcd559e0c699208a8ebc00f0e4a8adc616975d70c750d404f1334126c628cd75bddc18c51d00b7d7
SHA1 hash:	9ff03f8e5eca4bdc19e2ae77d3185c652cb8b47d
MD5 hash:	973162adc63ff13a237b79f48b3f0874
humanhash:	oscar-kansas-kansas-island
File name:	e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3.sh
Download:	download sample
File size:	8'716 bytes
First seen:	2026-02-22 13:15:50 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cLuckQdE3bvbxbL+Y9t9y9N9qIBiKIBRIBIIBKIBz6IBWIBMMIllIiHv:cLuLBrFXbnonIIyDFJFUun
TLSH	T18D02E4B025F18D732E24AA80F3372BA69BB6951345E7318C36CD2D265F86B12B0FF415
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

12

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive mirai

Link:

https://www.filescan.io/uploads/699b01b19eaae846593d95c5/reports/ab1d88ec-1157-44b0-a909-3070c01cf418/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5cc64013-04f3-401b-a6f4-844a15555b86

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4vrrkpif4ea6hnzfrzqe46mgul5np6qovlpn6hjhu5dk6yotb6zq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qhy7dac15h/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e563153d05e101e3b7258e604e7986a2fad7fa0eaadedf1d27a746af61d30fb3