MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4ae85dbcc10e8153f2603ed9035dcd75fa694c538bcea3ee5b75c56d00947527. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4ae85dbcc10e8153f2603ed9035dcd75fa694c538bcea3ee5b75c56d00947527
SHA3-384 hash:	5deb46475ccb072a0b858239811b92914b4b48d44e58bb78063efee3aa6114094100b6d840ad1cd050f2c9bcfb0b6789
SHA1 hash:	39f399e1f05d9bd8e71534747d00bc03be94bcd0
MD5 hash:	e2591e4d64e2ce35b96bcd65d0369899
humanhash:	hot-moon-mars-equal
File name:	bins.sh
Download:	download sample
File size:	230 bytes
First seen:	2025-12-02 17:23:46 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	3:TKH4v/4Gr9srXAzTAJvfDFze5yRfGBnjcIAyDOOd2tLK4S8yYE7vaA:hIGrOrwz8JnoafaIUDit+lYKyA
TLSH	T138D0A79524D3180ECEC54D7BABF210D41046705268514ACD39B7C1478EFC7503F41D84
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

29

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Mirai-82.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

InQuest

Result

Gathering data

Nucleon Malprob Malware

Score:

89%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4ae85dbcc10e8153f2603ed9035dcd75fa694c538bcea3ee5b75c56d00947527

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4ae85dbcc10e8153f2603ed9035dcd75fa694c538bcea3ee5b75c56d00947527/

ReversingLabs TitaniumCloud Document-HTML.Browser.Heuristic

Threat name:

Document-HTML.Browser.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-02 17:06:37 UTC

File Type:

Text (Shell)

AV detection:

4 of 36 (11.11%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jluf3pgbb2avh4tah3mqgxonox5gstctrphkh3s3oxcw2aeuoutq._file

Hatching Triage hailbot

Result

Malware family:

hailbot

Alert

Create hunting rule

Score:

  10/10

Tags:

family:hailbot botnet defense_evasion discovery linux

Link:

https://tria.ge/reports/251202-vyvlcaxpcq/

Behaviour

System Network Configuration Discovery

Writes file to tmp directory

File and Directory Permissions Modification

Executes dropped EXE

Detect Hailbot Linux botnet

Detects HailBot ARM

Hailbot

Hailbot family

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.