MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df
SHA3-384 hash:	59afd804a40a7426a91d260f9bad3017820d60d6ba52f708e04a9ba0f4cb5242cf5b4c49159f2c1da944786c3ae74323
SHA1 hash:	0e0420f591534fba39497b1c4362912a1cbb431e
MD5 hash:	50014092e62a41b6e0e5025ddf99baca
humanhash:	timing-glucose-comet-don
File name:	sh
Download:	download sample
File size:	289 bytes
First seen:	2025-01-30 19:51:41 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:/VJq5/rVYFOXDl3F5kJVKE6LsVKE6NiVVNDV2uVf6vC5:/VJ8jY8qg5sguThb
TLSH	T122D0CD1ED40282BF64444869EEAD7594BA4E2299134E0318567D515399A5CD87054635
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

132

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2243.6513.14500.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=679c78f102140668e2cdfb19linux22vpnfull_triage

Tags:

mirai agent virus shell

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/679bd864a2886cdc5ac7083f/reports/c65543bd-e955-4879-9f26-3f30da35fd13/overview

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df/

ReversingLabs TitaniumCloud Linux.Downloader.MiraiB

Threat name:

Linux.Downloader.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-30 19:41:48 UTC

File Type:

Text (Shell)

AV detection:

17 of 38 (44.74%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kse2ljdvpb5uv6jo4c7z2liimskmxqtp2ocrdhwd5awxce2nylpq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/5489a5a475787b4af92ee0bf9d2d086494cbc26fd385119ec3e82d71134dc2df