MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a
SHA3-384 hash:	ffaf81151c66be70722a5adee329039f218eae2cad6ed18435121579e2d26c159f0be8142ade23d3bbb9b91f10af05ad
SHA1 hash:	ef39556f988bd63819a3a30a5e4beba48d0db415
MD5 hash:	9059b4826968b9ede936547fa364f099
humanhash:	mockingbird-chicken-kilo-crazy
File name:	shi
Download:	download sample
File size:	257 bytes
First seen:	2025-09-19 18:08:17 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:/VJ+pUKUF2RVYs5CYf53I5l3FsDKVKAOXqIKa03IKq1IEE1IKBKW:/VJ+jREYzWgAsONI08W
TLSH	T1B8D05B5DF44248B7B4344CB8B7DB2595E51FA2192A0A65CD5545121BE4F1C719060553
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

37

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.1424.21522.14279.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68cd9c2b73af424b47e7ddf8/reports/e8846086-8b4f-40a1-96a3-c42657cdc28c/overview

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2025-09-19T15:22:00Z UTC

Last seen:

2025-09-19T15:22:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/d391b968-7771-4160-8042-6e830e1879b6

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a/

ReversingLabs TitaniumCloud Linux.Downloader.MiraiB

Threat name:

Linux.Downloader.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-19 18:00:27 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=areywta6t4fjcblezwkidxbcmeckc3b6xiccwe3bd4zlovqhvuva._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/04498b4c1e9f0a910564cd9481dc226104a16c3eba042b13611f32b75607ad2a