MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 6cfda92334b1c70835d864a52a13e8217f9a6f41506a8e9c67ba5ab19b8cd269. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | 6cfda92334b1c70835d864a52a13e8217f9a6f41506a8e9c67ba5ab19b8cd269 |
|---|---|
| SHA3-384 hash: | 493ba04ea56b44a8a6c7befbe4b78c7c99254b07fdfb3cae78c4c7f80f6ad8f8f5b0451999c76b4344f042201e0c0325 |
| SHA1 hash: | 74bc578e45369c2f0459062830bfc58aa41873ba |
| MD5 hash: | 892dd6e456fa51aa49c3026212ec7021 |
| humanhash: | fruit-tennis-twenty-nevada |
| File name: | fc |
| Download: | download sample |
| File size: | 901 bytes |
| First seen: | 2025-02-19 18:51:49 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/plain |
| ssdeep | 24:2zKOYYjWT6soe3TSsoe3TPe3TWve3T/e3k:2zZdjWT6mTSmT0TWUTEk |
| TLSH | T15A11E3632B4C75F5BBDE5A1AB2678BD66CD9D09F3C830601D83882D63C90A240A34F70 |
| Magika | shell |
| Reporter | |
| Tags: | sh |
Shell script dropper
This file seems to be a shell script dropper, using wget, ftpget and/or curl. More information about the corresponding payload URLs are shown below.
| URL | Malware sample (SHA256 hash) | Signature | Tags |
|---|---|---|---|
| http://91.188.254.201/arm7 | 17f914470010441ed25e072bce54a4dd4ed8f2d0a6fbc82c549228c6bf835145 | Mirai | censys elf mirai opendir |
| http://91.188.254.201/arm | 2f66b28645b910c0fcb7a751e9a0dad86fd2be825d07f45dd6ab086ec2eeafc0 | Mirai | 32-bit elf mirai opendir |
Intelligence
File Origin
# of uploads :
1
# of downloads :
115
Origin country :
DEVendor Threat Intelligence
Detection(s):
Verdict:
Malicious
Score:
97.4%
Link:
Tags:
mirai java
Verdict:
Suspicious
Labled as:
SH/Mirai.C.gen
Result
Verdict:
UNKNOWN
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Threat name:
Script.Trojan.Heuristic
Status:
Malicious
First seen:
2025-02-19 19:46:12 UTC
File Type:
Text
AV detection:
4 of 38 (10.53%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh 6cfda92334b1c70835d864a52a13e8217f9a6f41506a8e9c67ba5ab19b8cd269
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.