MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03
SHA3-384 hash:	4cb8a9ce6f3bbcbac6beb4ec856b9952afb555634d6ddfda0986431f908008341296cddb4d3747abe8311c57ae212473
SHA1 hash:	eb3f8b4c8afbd9391cb8270a00f37906ceacbc44
MD5 hash:	1bc03a6a3246eaf855146bc6d4545f0c
humanhash:	glucose-nitrogen-jersey-arkansas
File name:	e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03.sh
Download:	download sample
File size:	13'433 bytes
First seen:	2026-02-22 13:20:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuGB6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaV+I+j+3+FIBmIBGIBXgl:cCuq6nC4hvZ5mzjqKNpHPQsmJ1X
TLSH	T1A752483721F08B3297D055C4A2771BA14F72A70B456714B8F4BE5A369F2DA0370EBB25
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive soft-404

Link:

https://www.filescan.io/uploads/699b044197feb4afd651db44/reports/a03640b7-fc83-45a3-a8c1-936710563b43/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/39d7f7d8-1b5e-4c87-86c7-8644ee11b41e

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e65db1814851599f059eda0a30698708015321f2f75b105474f5a52ac42cec03/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4zo3dakikfmz6bm63ifda2mhbaavgips65nravdu6wssvrbm5qbq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qm95fadw6c/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.