🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6fb1d536ea669d200ead267c8ad031a10d7eb934ae97c315279e7ddf51ba10d0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 6fb1d536ea669d200ead267c8ad031a10d7eb934ae97c315279e7ddf51ba10d0
SHA3-384 hash: 1cc3bcaa94bf2c84deb5e88b50c4d0e837728ea9c0496c69c4696bf005a12b10f84602a328744ce657dd921f17678194
SHA1 hash: f5189bb66092c441dd8783b801d1d434cb5dc237
MD5 hash: 93477e1f846ef55108e9b8cf09074e8c
humanhash: aspen-diet-bakerloo-december
File name:6fb1d536ea669d200ead267c8ad031a10d7eb934ae97c315279e7ddf51ba10d0
Download: download sample
File size:139 bytes
First seen:2026-10-31 11:40:32 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 3:TKH4vooSsgXKGUeFe2YxSkYXAZ+7YFILDVwAHFLgeAjQDfX:h8sgXXe2YxSkYQA7Yy1wAl8eCefX
TLSH T101C02B9CC8005934301D402C42C8B070DA215247030400083C3320FF7FCC20774C4AA3
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter scharsey
Tags:cowrie honeypot posix sh

Intelligence


File Origin
# of uploads :
1
# of downloads :
75
Origin country :
US US
Vendor Threat Intelligence
No detections
Status:
terminated
Behavior Graph:
%3 guuid=dfa8a8b7-1c00-0000-9adc-a287d20b0000 pid=3026 /usr/bin/sudo guuid=823469b9-1c00-0000-9adc-a287d30b0000 pid=3027 /tmp/sample.bin guuid=dfa8a8b7-1c00-0000-9adc-a287d20b0000 pid=3026->guuid=823469b9-1c00-0000-9adc-a287d30b0000 pid=3027 execve
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments