MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 59d52bc0555e77b9fa897d5a4d87d61a78e03ff3dc55cb966946997782bd7fee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 2
| SHA256 hash: | 59d52bc0555e77b9fa897d5a4d87d61a78e03ff3dc55cb966946997782bd7fee |
|---|---|
| SHA3-384 hash: | 6f73fdb85ed0f401e4ed0223db1a082bd8307c00291b27013b1aee48359b30d45314922913b5ac07aa5a52ce358ffb46 |
| SHA1 hash: | 0b429dfc3f7e13cac5dd9de1d7eb51a8d1826257 |
| MD5 hash: | 8d0999cdfa86946343f89eced37b2a98 |
| humanhash: | ohio-gee-magnesium-kansas |
| File name: | clean |
| Download: | download sample |
| File size: | 943 bytes |
| First seen: | 2026-06-13 22:47:52 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/x-shellscript |
| ssdeep | 24:4ud1jvF3dudpRduJinDSx1wyx1+u5C2uK6QuTzaH+2TQuTzuCI2m2p4nKTNXK:4uddudpRduJiny1wO1+uA2uK6QuTu+2I |
| TLSH | T1E7119C8E6721D63425DDD524BBF24F3C6E72A3852C126806308B30FCE0EC69037A8C36 |
| TrID | 70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1) |
| Magika | shell |
| Reporter | |
| Tags: | sh |
Intelligence
File Origin
# of uploads :
1
# of downloads :
73
Origin country :
DEVendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Status:
terminated
Behavior Graph:
Score:
1%
Verdict:
Benign
File Type:
SCRIPT
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
6/10
Tags:
discovery linux
Behaviour
Enumerates kernel/hardware configuration
Reads runtime system information
Writes file to tmp directory
Attempts to change immutable files
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh 59d52bc0555e77b9fa897d5a4d87d61a78e03ff3dc55cb966946997782bd7fee
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.