MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f7a91ad4e45b1fe7ec013884b07dcf5461a61e8b34680b4cd1c72284e7ad6e36. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f7a91ad4e45b1fe7ec013884b07dcf5461a61e8b34680b4cd1c72284e7ad6e36
SHA3-384 hash:	e144770af375c082bee4f723a10319b65c15460b9335721f9ee71807c38e52e8e1737f1396f23887cd096a3691ed6d47
SHA1 hash:	c452acaf69eae322a24196acf07c45745fb91305
MD5 hash:	2d81bb38f783045905267319c2a8a1d8
humanhash:	sweet-april-floor-ohio
File name:	oss.sh
Download:	download sample
File size:	4'037 bytes
First seen:	2025-05-06 06:36:13 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:LsWr4fvJ3D3BP6SC1E0rYTs2B/pdV/0U8K3c//Qk66S9EfIekd/VFz/L3YzKLd/v:LsWr4fRzRPz0radV/spbK3zTZxBcyZ
TLSH	T174811E59708071F022CE82715FCA28197140414FE964393EB9DE9AB47FF4B9C56F8AB5
Magika	shell
Reporter	abuse_ch
Tags:	github-com-nahilagirl sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

92

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6819aeab432e243ac3e47d02linux22vpnfull_triage

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6819ae17c7418694c8a5f794/reports/d6bcd1fa-8381-40bb-ae33-7fb95b953a75/overview

Nucleon Malprob Benign

Score:

9%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/f7a91ad4e45b1fe7ec013884b07dcf5461a61e8b34680b4cd1c72284e7ad6e36

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f7a91ad4e45b1fe7ec013884b07dcf5461a61e8b34680b4cd1c72284e7ad6e36/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=66urvvhelmp6p3abhccla7opkrq2mhulgruawtgry4rijz5nny3a._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

antivm discovery execution linux

Link:

https://tria.ge/reports/250506-hdj8naynx2/

Behaviour

Command and Scripting Interpreter: Unix Shell

Process Discovery

Reads runtime system information

System Network Configuration Discovery

Checks CPU configuration

Reads CPU attributes

Enumerates running processes

Looks up external IP address via web service

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f7a91ad4e45b1fe7ec013884b07dcf5461a61e8b34680b4cd1c72284e7ad6e36