MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61
SHA3-384 hash:	4335874fa4d17a3268270b225054b76fcc8088749bacc4c7e72e16bb284b302a89d16103eea1d0a8d58694d793ee53b6
SHA1 hash:	1603351affedee2afaa42fae3b5fa83d282bf32c
MD5 hash:	b26ebec73708719f7b4de88beda7538c
humanhash:	fifteen-cardinal-orange-diet
File name:	sensi_totolink.sh
Download:	download sample
File size:	629 bytes
First seen:	2026-08-05 03:09:17 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:Am6MJGvFHV7KCkpQm9jWT9jWg5jWJFFl7j6NiCYRNaNN7sfYOfqd0Y1IYTv:AmlJGi8m9jWT9jWg5jWJFr7je7YRsvYC
TLSH	T12DF09EE5955284323F3D4A36F7041895F642181714E16689714DD9315E3C9786265F33
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

59

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2650.10779.13254.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/6a72a9770b753fe5fca622db/reports/7bd53409-1d5d-403a-97ce-0d4a2250077c/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-08-04T00:56:00Z UTC

Last seen:

2026-08-05T12:59:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/31156b8c-caf5-4a7d-94a1-e7fa66f30f24

Behavior Graph:

Download SVG

Nucleon Malprob Susipicious

Score:

62%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61/

ReversingLabs TitaniumCloud Script-BAT.Downloader.Heuristic

Threat name:

Script-BAT.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-05 02:26:09 UTC

File Type:

Text (Shell)

AV detection:

8 of 38 (21.05%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5hq77frj4u7na7cmw5mkgegystmiybe7jf55dcnalcufzc77fjqq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260805-dntsmaxarh/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e9e1ff9629e53ed07c4cb758a310d894d88c049f497bd189a058a85c8bff2a61