MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb
SHA3-384 hash:	f33fcd37a09386b9185b5998c0a662c79b878f85b2852bfd3e868e7a882c741448ce55252ff497a94b19ecdaf2172dff
SHA1 hash:	5bbaaa0e2865a1157da9bb1f8bdcb01ab28f8bfb
MD5 hash:	4c786fa2b3aaf134f650ff41bf6f7336
humanhash:	steak-maine-comet-twenty
File name:	6354
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'880 bytes
First seen:	2026-02-09 12:50:10 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:QO0u9YIt2PPqlmtmKTe8kw+ryPyP70HHHOHwD+:h0/It2M/loKP46b
TLSH	T11541BB5D7424CCB03C59CD3D6AC62609A88A475FD1177A48716F982E3F34168F1E86F9
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	smica83
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

37

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/915cd0d1-40f6-46b1-9aad-f752b1b3143b

Nucleon Malprob Benign

Score:

6%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=aijv253yzfxdbgdzxdixm7vgu7qmdhottmcpqi47yimhqe6pzhfq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

antivm defense_evasion discovery linux privilege_escalation upx

Link:

https://tria.ge/reports/260209-p23hgabs5a/

Behaviour

Process Discovery

Reads runtime system information

Writes file to tmp directory

Checks CPU configuration

Reads CPU attributes

UPX packed file

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Enumerates running processes

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/02135d7778c96e309879b8d1767ea6a7e0c19dd39b04f8239fc2187813cfc9cb