MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a68b62179f681de13de5ed62ef2ad80d6ea914bbba2740a86458ab48ba1e5ae. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 8a68b62179f681de13de5ed62ef2ad80d6ea914bbba2740a86458ab48ba1e5ae
SHA3-384 hash: d29863cd49405cb72c8db72779bea8a7dfa960ae9b0cf63209d2a2645dc58e770227b305822d9483c4ce7f6051624d58
SHA1 hash: 38accac20eb2a8923357ab190b3b0c7a43132b94
MD5 hash: 835bae6a19cec0cbf680a710623d3e8d
humanhash: orange-purple-maine-nineteen
File name:bins.sh
Download: download sample
File size:298 bytes
First seen:2026-06-15 20:27:09 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 6:ZO3zlgoYZ11Roczi4hxK1gM4Gxv05GawWaOagP80v:w3zlgos5oQJhO2DwTOZ80v
TLSH T103E02B89301130338DD5C032E46F01491106E56B89831D2CBB0FBF302F5A7C4F4C2650
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter nanoave
Tags:mirai sh

Intelligence


File Origin
# of uploads :
1
# of downloads :
66
Origin country :
BR BR
Vendor Threat Intelligence
No detections
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
opendir
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-06-16T20:08:00Z UTC
Last seen:
2026-06-16T20:28:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=2c51841e-1700-0000-081a-fcf6020e0000 pid=3586 /usr/bin/sudo guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592 /tmp/sample.bin guuid=2c51841e-1700-0000-081a-fcf6020e0000 pid=3586->guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592 execve guuid=2a137e20-1700-0000-081a-fcf60b0e0000 pid=3595 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=2a137e20-1700-0000-081a-fcf60b0e0000 pid=3595 execve guuid=ee79eb25-1700-0000-081a-fcf61c0e0000 pid=3612 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=ee79eb25-1700-0000-081a-fcf61c0e0000 pid=3612 execve guuid=396b2526-1700-0000-081a-fcf61d0e0000 pid=3613 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=396b2526-1700-0000-081a-fcf61d0e0000 pid=3613 clone guuid=45873026-1700-0000-081a-fcf61e0e0000 pid=3614 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=45873026-1700-0000-081a-fcf61e0e0000 pid=3614 execve guuid=38facc9d-1700-0000-081a-fcf6790f0000 pid=3961 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=38facc9d-1700-0000-081a-fcf6790f0000 pid=3961 execve guuid=6e1130a2-1700-0000-081a-fcf6890f0000 pid=3977 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=6e1130a2-1700-0000-081a-fcf6890f0000 pid=3977 execve guuid=b2ee80a2-1700-0000-081a-fcf68b0f0000 pid=3979 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=b2ee80a2-1700-0000-081a-fcf68b0f0000 pid=3979 clone guuid=28ba8aa2-1700-0000-081a-fcf68c0f0000 pid=3980 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=28ba8aa2-1700-0000-081a-fcf68c0f0000 pid=3980 execve guuid=6dae501a-1800-0000-081a-fcf646110000 pid=4422 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=6dae501a-1800-0000-081a-fcf646110000 pid=4422 execve guuid=9a4ae120-1800-0000-081a-fcf667110000 pid=4455 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=9a4ae120-1800-0000-081a-fcf667110000 pid=4455 execve guuid=9b042821-1800-0000-081a-fcf668110000 pid=4456 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=9b042821-1800-0000-081a-fcf668110000 pid=4456 clone guuid=064c3a21-1800-0000-081a-fcf66a110000 pid=4458 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=064c3a21-1800-0000-081a-fcf66a110000 pid=4458 execve guuid=c1ebf698-1800-0000-081a-fcf665120000 pid=4709 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=c1ebf698-1800-0000-081a-fcf665120000 pid=4709 execve guuid=0f8e33a0-1800-0000-081a-fcf679120000 pid=4729 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=0f8e33a0-1800-0000-081a-fcf679120000 pid=4729 execve guuid=de0a9ca0-1800-0000-081a-fcf67d120000 pid=4733 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=de0a9ca0-1800-0000-081a-fcf67d120000 pid=4733 clone guuid=804eaaa0-1800-0000-081a-fcf67e120000 pid=4734 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=804eaaa0-1800-0000-081a-fcf67e120000 pid=4734 execve guuid=4d095418-1900-0000-081a-fcf678130000 pid=4984 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=4d095418-1900-0000-081a-fcf678130000 pid=4984 execve guuid=2eabb91e-1900-0000-081a-fcf687130000 pid=4999 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=2eabb91e-1900-0000-081a-fcf687130000 pid=4999 execve guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001 /tmp/i686 net guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001 execve guuid=fbec451f-1900-0000-081a-fcf68a130000 pid=5002 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=fbec451f-1900-0000-081a-fcf68a130000 pid=5002 execve guuid=1af7ef96-1900-0000-081a-fcf680140000 pid=5248 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=1af7ef96-1900-0000-081a-fcf680140000 pid=5248 execve guuid=3e3b259c-1900-0000-081a-fcf683140000 pid=5251 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=3e3b259c-1900-0000-081a-fcf683140000 pid=5251 execve guuid=455e669c-1900-0000-081a-fcf684140000 pid=5252 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=455e669c-1900-0000-081a-fcf684140000 pid=5252 clone guuid=7f156d9c-1900-0000-081a-fcf685140000 pid=5253 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=7f156d9c-1900-0000-081a-fcf685140000 pid=5253 execve guuid=b26cef13-1a00-0000-081a-fcf687140000 pid=5255 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=b26cef13-1a00-0000-081a-fcf687140000 pid=5255 execve guuid=06122319-1a00-0000-081a-fcf688140000 pid=5256 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=06122319-1a00-0000-081a-fcf688140000 pid=5256 execve guuid=095f6d19-1a00-0000-081a-fcf689140000 pid=5257 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=095f6d19-1a00-0000-081a-fcf689140000 pid=5257 clone guuid=24917819-1a00-0000-081a-fcf68a140000 pid=5258 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=24917819-1a00-0000-081a-fcf68a140000 pid=5258 execve guuid=f0c41391-1a00-0000-081a-fcf693140000 pid=5267 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=f0c41391-1a00-0000-081a-fcf693140000 pid=5267 execve guuid=cb017c9a-1a00-0000-081a-fcf694140000 pid=5268 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=cb017c9a-1a00-0000-081a-fcf694140000 pid=5268 execve guuid=66f3329d-1a00-0000-081a-fcf695140000 pid=5269 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=66f3329d-1a00-0000-081a-fcf695140000 pid=5269 clone guuid=044a3f9d-1a00-0000-081a-fcf696140000 pid=5270 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=044a3f9d-1a00-0000-081a-fcf696140000 pid=5270 execve guuid=8d2cf215-1b00-0000-081a-fcf698140000 pid=5272 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=8d2cf215-1b00-0000-081a-fcf698140000 pid=5272 execve guuid=ba1c511c-1b00-0000-081a-fcf699140000 pid=5273 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=ba1c511c-1b00-0000-081a-fcf699140000 pid=5273 execve guuid=277ca01c-1b00-0000-081a-fcf69a140000 pid=5274 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=277ca01c-1b00-0000-081a-fcf69a140000 pid=5274 clone guuid=80b5a81c-1b00-0000-081a-fcf69b140000 pid=5275 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=80b5a81c-1b00-0000-081a-fcf69b140000 pid=5275 execve guuid=d33d4594-1b00-0000-081a-fcf6bd140000 pid=5309 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=d33d4594-1b00-0000-081a-fcf6bd140000 pid=5309 execve guuid=a397b598-1b00-0000-081a-fcf6be140000 pid=5310 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=a397b598-1b00-0000-081a-fcf6be140000 pid=5310 execve guuid=7fd9f398-1b00-0000-081a-fcf6bf140000 pid=5311 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=7fd9f398-1b00-0000-081a-fcf6bf140000 pid=5311 clone guuid=92b4fb98-1b00-0000-081a-fcf6c0140000 pid=5312 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=92b4fb98-1b00-0000-081a-fcf6c0140000 pid=5312 execve guuid=10909410-1c00-0000-081a-fcf6c2140000 pid=5314 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=10909410-1c00-0000-081a-fcf6c2140000 pid=5314 execve guuid=2544a016-1c00-0000-081a-fcf6c3140000 pid=5315 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=2544a016-1c00-0000-081a-fcf6c3140000 pid=5315 execve guuid=5d632d17-1c00-0000-081a-fcf6c4140000 pid=5316 /usr/bin/bash guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=5d632d17-1c00-0000-081a-fcf6c4140000 pid=5316 clone guuid=10164217-1c00-0000-081a-fcf6c5140000 pid=5317 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=10164217-1c00-0000-081a-fcf6c5140000 pid=5317 execve guuid=9b36fc8e-1c00-0000-081a-fcf6c7140000 pid=5319 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=9b36fc8e-1c00-0000-081a-fcf6c7140000 pid=5319 execve guuid=b7246293-1c00-0000-081a-fcf6c8140000 pid=5320 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=b7246293-1c00-0000-081a-fcf6c8140000 pid=5320 execve guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321 /tmp/x86 net guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321 execve guuid=d517b993-1c00-0000-081a-fcf6ca140000 pid=5322 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=d517b993-1c00-0000-081a-fcf6ca140000 pid=5322 execve guuid=8a96610b-1d00-0000-081a-fcf6cf140000 pid=5327 /usr/bin/wget net send-data write-file guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=8a96610b-1d00-0000-081a-fcf6cf140000 pid=5327 execve guuid=0a83b210-1d00-0000-081a-fcf6d0140000 pid=5328 /usr/bin/chmod guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=0a83b210-1d00-0000-081a-fcf6d0140000 pid=5328 execve guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329 /tmp/x86_64 net guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329 execve guuid=8d785611-1d00-0000-081a-fcf6d2140000 pid=5330 /usr/bin/sleep guuid=09642520-1700-0000-081a-fcf6080e0000 pid=3592->guuid=8d785611-1d00-0000-081a-fcf6d2140000 pid=5330 execve 2b1dfece-7fce-545c-9110-efae90c56bf7 217.60.195.144:80 guuid=2a137e20-1700-0000-081a-fcf60b0e0000 pid=3595->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 137B guuid=38facc9d-1700-0000-081a-fcf6790f0000 pid=3961->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=6dae501a-1800-0000-081a-fcf646110000 pid=4422->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=c1ebf698-1800-0000-081a-fcf665120000 pid=4709->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=4d095418-1900-0000-081a-fcf678130000 pid=4984->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B 8b0a01dc-0728-52c1-8024-c4ba7801b8d6 8.8.8.8:53 guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con guuid=4ad9ad1f-1900-0000-081a-fcf68c130000 pid=5004 /tmp/i686 guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001->guuid=4ad9ad1f-1900-0000-081a-fcf68c130000 pid=5004 clone guuid=b6f75c5b-1900-0000-081a-fcf621140000 pid=5153 /tmp/i686 guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001->guuid=b6f75c5b-1900-0000-081a-fcf621140000 pid=5153 clone guuid=14550397-1900-0000-081a-fcf681140000 pid=5249 /tmp/i686 guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001->guuid=14550397-1900-0000-081a-fcf681140000 pid=5249 clone guuid=eb610997-1900-0000-081a-fcf682140000 pid=5250 /tmp/i686 net send-data zombie guuid=00633d1f-1900-0000-081a-fcf689130000 pid=5001->guuid=eb610997-1900-0000-081a-fcf682140000 pid=5250 clone guuid=1af7ef96-1900-0000-081a-fcf680140000 pid=5248->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=eb610997-1900-0000-081a-fcf682140000 pid=5250->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con 93238af1-11ba-5906-b5fa-141aca775a6a 217.60.195.144:1999 guuid=eb610997-1900-0000-081a-fcf682140000 pid=5250->93238af1-11ba-5906-b5fa-141aca775a6a send: 117B guuid=b26cef13-1a00-0000-081a-fcf687140000 pid=5255->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=f0c41391-1a00-0000-081a-fcf693140000 pid=5267->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 138B guuid=8d2cf215-1b00-0000-081a-fcf698140000 pid=5272->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 137B guuid=d33d4594-1b00-0000-081a-fcf6bd140000 pid=5309->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 137B guuid=10909410-1c00-0000-081a-fcf6c2140000 pid=5314->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 137B guuid=9b36fc8e-1c00-0000-081a-fcf6c7140000 pid=5319->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 137B guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con guuid=13b9ce93-1c00-0000-081a-fcf6cb140000 pid=5323 /tmp/x86 guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321->guuid=13b9ce93-1c00-0000-081a-fcf6cb140000 pid=5323 clone guuid=73df84cf-1c00-0000-081a-fcf6cc140000 pid=5324 /tmp/x86 guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321->guuid=73df84cf-1c00-0000-081a-fcf6cc140000 pid=5324 clone guuid=95d13c0b-1d00-0000-081a-fcf6cd140000 pid=5325 /tmp/x86 guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321->guuid=95d13c0b-1d00-0000-081a-fcf6cd140000 pid=5325 clone guuid=590d470b-1d00-0000-081a-fcf6ce140000 pid=5326 /tmp/x86 net send-data zombie guuid=7a28ad93-1c00-0000-081a-fcf6c9140000 pid=5321->guuid=590d470b-1d00-0000-081a-fcf6ce140000 pid=5326 clone guuid=590d470b-1d00-0000-081a-fcf6ce140000 pid=5326->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con guuid=590d470b-1d00-0000-081a-fcf6ce140000 pid=5326->93238af1-11ba-5906-b5fa-141aca775a6a send: 115B guuid=8a96610b-1d00-0000-081a-fcf6cf140000 pid=5327->2b1dfece-7fce-545c-9110-efae90c56bf7 send: 140B guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con guuid=d8b97211-1d00-0000-081a-fcf6d3140000 pid=5331 /tmp/x86_64 guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329->guuid=d8b97211-1d00-0000-081a-fcf6d3140000 pid=5331 clone guuid=cdc5184d-1d00-0000-081a-fcf6d4140000 pid=5332 /tmp/x86_64 guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329->guuid=cdc5184d-1d00-0000-081a-fcf6d4140000 pid=5332 clone guuid=be41c088-1d00-0000-081a-fcf6d5140000 pid=5333 /tmp/x86_64 guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329->guuid=be41c088-1d00-0000-081a-fcf6d5140000 pid=5333 clone guuid=acd3c588-1d00-0000-081a-fcf6d6140000 pid=5334 /tmp/x86_64 net send-data zombie guuid=f4754411-1d00-0000-081a-fcf6d1140000 pid=5329->guuid=acd3c588-1d00-0000-081a-fcf6d6140000 pid=5334 clone guuid=acd3c588-1d00-0000-081a-fcf6d6140000 pid=5334->8b0a01dc-0728-52c1-8024-c4ba7801b8d6 con guuid=acd3c588-1d00-0000-081a-fcf6d6140000 pid=5334->93238af1-11ba-5906-b5fa-141aca775a6a send: 105B
Result
Malware family:
n/a
Score:
  3/10
Tags:
linux
Behaviour
Writes file to tmp directory
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments