MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9
SHA3-384 hash: d5624b523df0c71b68962e2623e82c508d694199a6d5be859df0e8866713cdec87d63f3a1f7e0dbdc5af7552e87a5976
SHA1 hash: d884ef61368670d5187f24cef3bf3ff0b1a3f410
MD5 hash: ca3559f2d252f0adf7848636ae27b360
humanhash: golf-twelve-asparagus-sodium
File name:1.sh
Download: download sample
File size:128 bytes
First seen:2026-02-08 13:56:15 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 3:TKH/T+jP0SDLVy4MEcDDDt3QJJMRBmUSxvXGcL:MKP0K9aDxgJJQwUSxOcL
TLSH T1A4B09B4F50456031E5C9704BD16C62AF441B51171FA04547651654C5553D79CD61356B
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
27
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Gathering data
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=m226ooon6zbsang5ab2pjzi3ov2chv7jppqgdgdwbtkfdi7p26uq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery linux
Link:
https://tria.ge/reports/260208-q9ayvsew4a/
Behaviour
Reads runtime system information
Writes file to tmp directory
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh 66b5e739cdf6432034dd0074f4e51b757423d7e97be06198760cd451a3efd7a9

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3774464/
  
Delivery method
Distributed via web download

Comments