MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91
SHA3-384 hash:	5e40eb711f42248635ecde1f8519479d6f1952af9946e8124929e46c1b7c025f7c9d2404ccfcd432aae4e0c9711193f2
SHA1 hash:	6045ddd8bf443ca1fc8e29a516f4d52c275da3f9
MD5 hash:	76af58e8a93762c3e5e263a9fc290289
humanhash:	twelve-four-eighteen-neptune
File name:	lil
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'018 bytes
First seen:	2025-09-19 18:29:19 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:pwZhk/Zk/tk/Sonk/wI3lIyk/mzyk/Vk/v:pwZhkxkFkPkImXkZktkn
TLSH	T1761100EFB18995A20CD8874C39E7C919510485D311C4CE8FA86E0D32ED85B5EF4D8FD8
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

40

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-19T16:54:00Z UTC

Last seen:

2025-09-19T16:54:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5a642255-95b3-4725-9757-47739bf0fdc8

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-09-19 18:16:23 UTC

File Type:

Text (Shell)

AV detection:

9 of 24 (37.50%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jvqam2uwnbrt4iucwxwfvbei4o5m42niatcuachublvjh3ionwiq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/4d60066a9668633e2282b5ec5a8488e3bace69a804c54008f40aea93ed0e6d91