🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eb88cf325bda936f2f53ea935ab8cdcd27cc75fdf9f06a6e203a9fd3eb5b9fe9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 1


Intelligence 1 IOCs YARA File information Comments

SHA256 hash: eb88cf325bda936f2f53ea935ab8cdcd27cc75fdf9f06a6e203a9fd3eb5b9fe9
SHA3-384 hash: 23cf4bc95b056b8bbc40181f7c3c82fd7eb2438dd8eba356812d29e8a66d8b86f636266a3fd17799cc32d3c5f4e5ce1d
SHA1 hash: e3bcd6df4aec0b5cf46134955c881329d7ab11fd
MD5 hash: a87be78dade4e51f7f2a38ee092f3131
humanhash: twenty-uniform-jupiter-mockingbird
File name:exploit_hp-021419-758075.sh
Download: download sample
File size:34 bytes
First seen:2026-10-25 02:14:43 UTC
Last seen:2026-10-25 02:20:02 UTC
File type: sh
MIME type:text/plain
ssdeep 3:3AXKAJJvuXARfn:Hs8XARf
TLSH TNULL
Magika txt
Reporter BedRock
Tags:BedrockSafeguard honeypot sh


Avatar
BedRock
Captured live by Bedrock Safeguard MIRAGE-9 Honeypot from 20.46.254.53 (United States)

Intelligence


File Origin
# of uploads :
3
# of downloads :
153
Origin country :
US US
Vendor Threat Intelligence
No detections
Status:
terminated
Behavior Graph:
%3 guuid=e7b086f3-1600-0000-9223-a5930a0d0000 pid=3338 /usr/bin/sudo guuid=eb36f7f4-1600-0000-9223-a593110d0000 pid=3345 /tmp/sample.bin guuid=e7b086f3-1600-0000-9223-a5930a0d0000 pid=3338->guuid=eb36f7f4-1600-0000-9223-a593110d0000 pid=3345 execve
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Executes a command shell one-liner
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments