MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f17d2f0c21f583c788514f8f6f32b011e62bc26cddb67eabef0ceb4c8e08adc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4f17d2f0c21f583c788514f8f6f32b011e62bc26cddb67eabef0ceb4c8e08adc
SHA3-384 hash:	70829bedc763b4a2916a17225edaf21a57bbcf6599a0a55b569dbb40df0da17065a8f547ad4f9cb3177d13c272eea80d
SHA1 hash:	6b7e70b97024ab3fe24bd7fbaf2ffb26a364c348
MD5 hash:	546f1d6b9d4dc321cf68b79b066171aa
humanhash:	seventeen-emma-louisiana-florida
File name:	setup_c3pool_miner.sh
Download:	download sample
Signature	CoinMiner Alert Create hunting rule
File size:	12'745 bytes
First seen:	2025-06-11 04:23:13 UTC
Last seen:	2025-07-15 11:13:25 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	384:GqEHeA0MpI05MtJyjiKH6DUqBuRyRG+o1SS48WG0l1XDs/G:Gq4J0My9EiKH6DRuRyRG+oQ1nGy17
TLSH	T1A842A5B1B95233F1603C80707DDA9148B39C655F16AA3CBDF4AAA5B4301C3D91DFE16A
Magika	shell
Reporter	abuse_ch
Tags:	CoinMiner sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

69

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Txt.Trojan.XMRig-9915823-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=684907088bd5d68a12e7a0d5linux22vpnfull_triage

Tags:

n/a

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/4f17d2f0c21f583c788514f8f6f32b011e62bc26cddb67eabef0ceb4c8e08adc

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4f17d2f0c21f583c788514f8f6f32b011e62bc26cddb67eabef0ceb4c8e08adc/

ReversingLabs TitaniumCloud Linux.Coinminer.XMRig

Threat name:

Linux.Coinminer.XMRig

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-11 04:25:02 UTC

File Type:

Text (Shell)

AV detection:

21 of 38 (55.26%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=j4l5f4gcd5mdy6efct4pn4zlaepgfpbgzxnwp2v66dhljsharloa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery linux

Link:

https://tria.ge/reports/250611-e1tttsyzbz/

Behaviour

Reads runtime system information

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/4f17d2f0c21f583c788514f8f6f32b011e62bc26cddb67eabef0ceb4c8e08adc