MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c
SHA3-384 hash:	ebafe5bf2aa5ed11bb9c750fc327c647846fe625d14239f6ba92d7f54e5264f931ff3785ebfc7a7f2608a8675b554556
SHA1 hash:	d13ddb7a5b7267721b7a53a20420fc8b1e15d824
MD5 hash:	ff8d633d7ce6c9aafcf62437d199e286
humanhash:	purple-twelve-jupiter-orange
File name:	f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c.sh
Download:	download sample
File size:	3'310 bytes
First seen:	2026-02-22 13:19:25 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:cnRm9+p9nB6gUIdlFmRpkdl/81lNN1IGYlrk91QRp1cychClrFs9ClwnEZvYrxZH:cRmSB6qXaN13K4Kp1p98XhJ
TLSH	T14E61D97024F04C732E205980B3771BA6BBB6D85349A3758C35DE2E39AF87B12B5AF411
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

7

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/699b045704510f87ba753d5a/reports/0ce36551-9436-490f-87de-d0a6cb886caf/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/7d4e25d1-c0c3-4b97-a704-a13782907086

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6sqbetfkwwxa6iwbot5g2tdlyxngh3i6epktjzxhqlmlum2zurwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qldpvadt7a/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f4a0124caab5ae0f22c174fa6d4c6bc5da63ed1e23d534e6e782d8ba3359a46c