MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1
SHA3-384 hash:	30abedddef49b6f60bc486edb530cc97ef896e275d0c8843b8faac99c7599a6030a65bf2639f689b18917ffd7140e444
SHA1 hash:	80d883679b93429256fe5f55e86e77672fd145e1
MD5 hash:	ebb3728ac5ca992ac9c5925ea476e3ee
humanhash:	johnny-nevada-wolfram-aspen
File name:	bins.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	542 bytes
First seen:	2026-05-26 19:47:41 UTC
Last seen:	2026-05-27 16:45:50 UTC
File type:	sh
MIME type:	text/plain
ssdeep	6:Tk13FQi3fRucDJZvucaucrcR/qwgMiCusEFNlcL/qwgMigJusEFNgKiMdI4d:YjvRxVZvxaxkbiBr8big0rgKiMWi
TLSH	T1E7F05ED3D27420B090ED08FEE7E2FC78626560BE9C1A8D64DCD5E4504399D8C28CE5EB
Magika	batch
Reporter	BlinkzSec

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

53

Origin country :

RO

Vendor Threat Intelligence

ACCE Unknown

No detections

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2026-05-26T16:56:00Z UTC

Last seen:

2026-05-28T13:47:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/df18122a-1f0f-4c43-a963-5e4d60af7236

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-26 19:47:47 UTC

File Type:

Text (Shell)

AV detection:

9 of 38 (23.68%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mo4u5oc6jwimihuftd652te2n4kdvdcmtfvadzm46dgvyjn5xdiq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260526-yh9l4sb17w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/63b94eb85e4d90c41e8598fddd4c9a6f143a8c4c996a01e59cf0cd5c25bdb8d1