MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1
SHA3-384 hash:	6d50bf73a7afd940ddcf1d3e1bef36d364f7b2e1d988aa240dc6374cfc1163d1049624264f9862423f48355e8075c712
SHA1 hash:	f307d6fc3573974e5619978b402ec4c2b91d7035
MD5 hash:	fa4868de155ef0a56fa965c67ce33c82
humanhash:	winner-coffee-lemon-cardinal
File name:	bins.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	709 bytes
First seen:	2026-03-06 20:56:41 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:dzCuMtdX+J+828z/KUoub/YDnY2+jrfZFt+jrjgyufiMPZIxy/0w9nG:dzCtOJ/XouTY5+P7t+zgyuBIxy8
TLSH	T1F801CB5A42511C342ED9802FB9EED1E0706D14AF26C29C3874DCBDA77F2CE086E109AF
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/69ab3fa7d967dbda74f0e370/reports/444c3d56-2fb4-47ba-ad6b-e02b159c1c5b/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p

Link:

https://opentip.kaspersky.com/6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/9fe36d83-dc70-444d-b8a1-d530e2c16dda

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

23%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1

ReversingLabs TitaniumCloud Script.Trojan.Malgent

Threat name:

Script.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-06 20:57:13 UTC

File Type:

Text (Shell)

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nulsd77vy5gs3sxp2ozxrv6hbjhkq6x6y5h42udo2mazkmtrtpiq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet defense_evasion discovery linux

Link:

https://tria.ge/reports/260306-zrnaxagt3x/

Behaviour

System Network Configuration Discovery

Writes file to tmp directory

Changes its process name

File and Directory Permissions Modification

Deletes itself

Executes dropped EXE

Traces itself

Mirai

Mirai family

Malware Config

C2 Extraction:

84.32.98.123

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/6d1721fff5c74d2dcaefd3b378d7c70a4ea87afec74fcd506ed3019532719bd1