MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f30e03097ae62592bb401cd68745c6b9bfa66a7bb06458adbabe499a9af635af. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f30e03097ae62592bb401cd68745c6b9bfa66a7bb06458adbabe499a9af635af
SHA3-384 hash:	a0b13fdbe20f68450e9a2e7a3496f74c8b7ad9f69f9c3a88dddc21e8c325930620a2036a4f33536e8187f8d9b440445d
SHA1 hash:	e8534b86c44e04e9acfaa1d6a2bcfb1fd1268aa0
MD5 hash:	034a16eaeb79fa985f09d0e2eabdd759
humanhash:	tennis-mirror-cold-carolina
File name:	tbk
Download:	download sample
File size:	661 bytes
First seen:	2026-08-06 13:47:32 UTC
Last seen:	2026-08-06 13:59:55 UTC
File type:	sh
MIME type:	text/plain
ssdeep	6:B2FrB2GLp0TFrAAz4ARFFFrI0eFK0K70TFrlfzCWkSn+uB0FrB2GLviLFrAAzNFv:BynZoF5ewEOWNn+08nviKkewtgZt+JGy
TLSH	T1EA01D6DE03225551F094AF15B3A14DAA83CFAE8C21A82F8D7C770AD3044DCB8B101B9B
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

7

# of downloads :

36

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox downloader evasive

Link:

https://www.filescan.io/uploads/6a7493c46857b8b1e5d11c3c/reports/5d54705f-eb92-48cf-85eb-01fd12c9fac3/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/c7029d24-1408-46a7-bdef-202ac6963aa9

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f30e03097ae62592bb401cd68745c6b9bfa66a7bb06458adbabe499a9af635af

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f30e03097ae62592bb401cd68745c6b9bfa66a7bb06458adbabe499a9af635af/

ReversingLabs TitaniumCloud Script-BAT.Downloader.Heuristic

Threat name:

Script-BAT.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-06 14:01:59 UTC

File Type:

Text (Shell)

AV detection:

6 of 36 (16.67%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6mhagcl24yszfo2adtliorogxg72m2t3wbsfrln2xzezvgxwgwxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260806-rbwy4sac39/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

Executes a command shell one-liner

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f30e03097ae62592bb401cd68745c6b9bfa66a7bb06458adbabe499a9af635af