MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148
SHA3-384 hash:	e4e5b14368fd0a986b0ead42dca6b53f137b5bb758008bb2bc2b0e2cfe2b8e20cd80ddbc130381d73c4a2ff5a1ca77d6
SHA1 hash:	61a6ef7b18ba39e90bd481967acf824f277e0809
MD5 hash:	e63dd4b969b76bb499cbdfd300de19e6
humanhash:	sink-lemon-vegan-green
File name:	0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148
Download:	download sample
File size:	1'159 bytes
First seen:	2026-07-14 21:30:12 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:H2/lUb8L1I/aupW40LYZpgRG89Ay+22MnKvgsro90C6:W/ncaupW40LYZpgRG89Ay+2znYkSn
TLSH	T16B213BD846608BED5AC38649BB7042CCD59E42C3FC43AF49E49505AB31BC2A8776FB84
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	EnthecSolutions
Tags:	enthec sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

CA

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox mirai

Link:

https://www.filescan.io/uploads/6a56aa802966fccad92301c9/reports/301d0519-b1d3-4c41-9346-8cd5dfd70798/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-07-12T17:30:00Z UTC

Last seen:

2026-07-14T20:40:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/21edb3b8-5e8f-4869-aa79-8626e87a6c5b

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148/

ReversingLabs TitaniumCloud Linux.Trojan.ShellAgnt

Threat name:

Linux.Trojan.ShellAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-12 22:25:17 UTC

File Type:

Text (Shell)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bjryhb5asn56eal6f7r2zii22nedygbks3jtpxt3qo7ze73vyfea._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion linux

Link:

https://tria.ge/reports/260714-1cs4aad12m/

Behaviour

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/0a638387a0937be2017e2fe3aca11ad3483c182a96d337de7b83bf927f75c148