MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 00cae2bf4d705018eaae458331caf0afbc13bd3ca6949b1bd039b8d8f5e62ac9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	00cae2bf4d705018eaae458331caf0afbc13bd3ca6949b1bd039b8d8f5e62ac9
SHA3-384 hash:	54c5cacd7fca776befe810fd91efe2642c77ace76b5152b28fb7e64a2133d39b7ef667539ad392dc9c0fbc69f339c598
SHA1 hash:	fb8def951bfc2071d9e3ab78ad2489c73aba4736
MD5 hash:	873852594908ebecd40ab6c47e55525d
humanhash:	twelve-chicken-nineteen-lima
File name:	ssh.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	703 bytes
First seen:	2025-01-06 11:01:28 UTC
Last seen:	2025-01-21 13:17:03 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:KGAkNZADziYyA7u/4AM8QpAd8YM6iAswIMRNItAwDwCBhAOUwn/6AswU:KXo+DeYTq/NsuzM2/IMRNIyxCQIn/r/U
TLSH	T1DB0196CE2DA136464804DEC4256188409D07FEEEE5978B4EF4C8CE3A96C8A447126F8B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

96

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=677bb95dc029bd73f284129clinux22vpnfull_triage

Tags:

malware

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug

Link:

https://www.filescan.io/uploads/677bb82e3658a5e1ef32d5dc/reports/0817bb8e-7ce2-4d19-b9be-1db8746de98b/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/00cae2bf4d705018eaae458331caf0afbc13bd3ca6949b1bd039b8d8f5e62ac9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/00cae2bf4d705018eaae458331caf0afbc13bd3ca6949b1bd039b8d8f5e62ac9/

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-06 11:02:04 UTC

File Type:

Text (Shell)

AV detection:

10 of 38 (26.32%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=adfofp2nobibr2voiwbtdsxqv66bhpj4u2kjwg6qhg4nr5pgfleq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250106-m44r7sxker/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/00cae2bf4d705018eaae458331caf0afbc13bd3ca6949b1bd039b8d8f5e62ac9