MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f
SHA3-384 hash:	09505775a1e105cf850a1e2b631c22bb0f9a9743c8ab3c789c09d08f0739a8984c644c10e132e7738a33a35d5d572a90
SHA1 hash:	55460f8abc84f2a077f6c6b6fccfb54c9adafce9
MD5 hash:	8b5d595f6052140081f8603f45344e8f
humanhash:	mobile-missouri-minnesota-beer
File name:	f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f.sh
Download:	download sample
File size:	12'470 bytes
First seen:	2026-02-22 13:19:26 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvjskQtoxIBmIBBIBUZ:cCu34hvZ5m5FG4j4HKNpivXd5W5
TLSH	T1E742673721F08B3297D051C9A2771B614F72A70B456724B8F4FE5A269F2DA0370EBB61
Magika	xml
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

7

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/699b045891ad9169e533371a/reports/ed0e852a-5125-4209-95dd-106a360bea5b/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2e5c2d5c-aa8e-4e43-8417-7b97495516d2

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6xhtihs56pmotapy6ynm64l2343ppzlnyuxxewwyzs4aeeouc5xq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-qlebdadt7d/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f5cf341e5df3d8e981f8f61acf717adf36f7e56dc52f725ad8ccb80211d4176f