MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52
SHA3-384 hash:	0776b2cc94209871bec663db1675c2d6f1e4fcc46926eadd5b8ac86562083eb2b9932e7122c7d4ed2bf4e437c184c391
SHA1 hash:	99a2dc4c1ffaba1f490324f4c577cad21f56c319
MD5 hash:	8c45305df1afb2a9d0249ba3d0576b41
humanhash:	summer-single-bacon-nevada
File name:	sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'081 bytes
First seen:	2026-04-28 19:49:38 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:vkwvpihneZZn1oBydXqPtonmzEvJGU6ljiPq2MTCki:vkwYheZZK862mzIj6K
TLSH	T1A54124BAB8628E30336DC5BC7489654CA7578A6F49162E74F047B83C37BC3247174295
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

89

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-AEH.49951287.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

coinminer

Link:

https://www.filescan.io/uploads/69f10f9a81aa9ec3bc2ff8cf/reports/77e293cf-7435-4b0e-8d92-abb38a7d957c/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-04-28T13:30:00Z UTC

Last seen:

2026-04-30T12:58:00Z UTC

Hits:

~10000

Link:

https://opentip.kaspersky.com/8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/f0713aca-b2ad-4073-8c60-10d84f521e92

Nucleon Malprob Benign

Score:

12%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/8fdd3ab82e8c40e4262d6ea426cf8668541cc9396c38c438b44951422ef2fa52

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-28 18:17:55 UTC

File Type:

Text (Shell)

AV detection:

10 of 37 (27.03%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=r7otvoborraoijrnn2scnt4gnbkbzsjznq4miofujfiuelxs7jja._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

antivm discovery linux

Link:

https://tria.ge/reports/260428-ykqa9ad15z/

Behaviour

Enumerates kernel/hardware configuration

Reads runtime system information

Checks CPU configuration

Reads CPU attributes

Reads AppArmor ptrace settings

Enumerates running processes

Reads hardware information

Reads network interface configuration

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.