MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7
SHA3-384 hash:	61da0b1a5de4603d16a4a9e62c50cc4cab7e9b8d1036d0a05439bcb001398722059c0f064902814337abb8b86c604933
SHA1 hash:	205a21bbc8eb07bd987b49716c8d7714e1fa016a
MD5 hash:	e49dbcebf4ba87e706c83aa6374de649
humanhash:	jupiter-utah-fruit-mars
File name:	proxyv2.sh
Download:	download sample
File size:	2'532 bytes
First seen:	2026-04-05 04:12:37 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:eNJn57KOnWhNRv/BCslwTvIRbz3QPvlId/IkKj4651dF8q3o6yvM18rC6oXFd:Cp0mWRv9lwBPNCwzjRXj8q3o6ee8rRkd
TLSH	T19A51C7C17DA49AB06F4BC835157B371AF017128A2B432968B09B2049DBFC8D253BED72
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

32

Origin country :

DE

Vendor Threat Intelligence

ACCE

Gathering data

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/69d1e15cbe4fad62665ffef1/reports/8c382766-90cf-4ebe-903e-b9c321483035/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Adware

Verdict:

Adware

File Type:

Script

Detections:

not-a-virus:HEUR:Downloader.Shell.Miner.a

Link:

https://opentip.kaspersky.com/8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/221c7a6c-8057-4151-a3d8-e302304fcb8a

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

4%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7/

Neiki Family.XMRIG

Verdict:

Malicious

Threat:

Family.XMRIG

Link:

https://tip.neiki.dev/file/8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rxdzybcpbc5ec7f6zcsokdlr3yutkhu2mvysd7g22pzsaqnhj73q._file

Hatching Triage xmrig

Result

Malware family:

xmrig

Alert

Create hunting rule

Score:

  10/10

Tags:

family:xmrig antivm defense_evasion discovery execution linux miner persistence privilege_escalation

Link:

https://tria.ge/reports/260405-es72gshz3j/

Behaviour

Enumerates kernel/hardware configuration

Reads runtime system information

System Network Configuration Discovery

Writes file to shm directory

Writes file to tmp directory

Checks CPU configuration

Reads CPU attributes

Checks system information (zLinux)

Creates/modifies Cron job

Modifies systemd

File and Directory Permissions Modification

XMRig Miner payload

Xmrig family

xmrig

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.33

Link:

https://yomi.yoroi.company/submissions/8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7