MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cbb43bb19040d5f5382fd11b1c5da50b803e2de8cb58e9a6c04ebb01acf5398. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8cbb43bb19040d5f5382fd11b1c5da50b803e2de8cb58e9a6c04ebb01acf5398
SHA3-384 hash:	9309478f1a3ac6bc332d332dcd16e8c0b15e6646264f4a7e1d46721237491febd272bd3730b6ea7aca93444b0191ea01
SHA1 hash:	c51f4cdb24a043a69df23a2c666aa6c97cee93d3
MD5 hash:	164995f42218095f1fc04fe306c865e5
humanhash:	magnesium-seventeen-oxygen-crazy
File name:	cln.sh
Download:	download sample
File size:	9'831 bytes
First seen:	2025-07-16 02:42:01 UTC
Last seen:	2025-07-16 16:45:10 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	192:LG0ovZkg3zw3w3TJE3J3TrFrqKeOhZnQF17kcgs9G:cvEqaKK4C
TLSH	T1601252036BAA62F52159C1BC5D839155164D510326282839BFBCFB443F2872CE2F7BAF
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

24

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Agent-CBH.14180.17311.UNOFFICIAL

Alert

Create hunting rule

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/ff7c092e-535e-4884-84b6-2141306067a2

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8cbb43bb19040d5f5382fd11b1c5da50b803e2de8cb58e9a6c04ebb01acf5398

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8cbb43bb19040d5f5382fd11b1c5da50b803e2de8cb58e9a6c04ebb01acf5398/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rs5uhoyzaqgv6u4c7ui3dro2kc4ahyw6rs2y5gtmatv3agwpkoma._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

discovery linux

Link:

https://tria.ge/reports/250716-c67xjahn3y/

Behaviour

Reads runtime system information

Writes file to tmp directory

Reads CPU attributes

Enumerates running processes

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.23

Link:

https://yomi.yoroi.company/submissions/8cbb43bb19040d5f5382fd11b1c5da50b803e2de8cb58e9a6c04ebb01acf5398