MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e
SHA3-384 hash:	4b843a82d615220de341a6ca127d9ccb68ba83be682da48fcec94cb565e216aeae1a637c749d5d02aeef6719f1b35cdb
SHA1 hash:	2d252ddd45ce187c08102cebe918d838f3e20d10
MD5 hash:	ed704b47b3320cd9d6cee800754dd7cd
humanhash:	timing-vermont-florida-river
File name:	92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e.sh
Download:	download sample
Signature	CoinMiner Alert Create hunting rule
File size:	1'364 bytes
First seen:	2026-09-28 18:57:21 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:U88vyB1BOYn+MyvaFkQgPnE7FkQgPVOW0pv+X1hC9l0f37Y6xClcT6:d8vSL3n+MyCFz2nE7Fz2VObZj9Ur9xd6
TLSH	T13B21CEF2F438CA72716C443DB48E9A7A3AD30E3B5C857C4590A3DD291ABC15AB469F31
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	Kejult
Tags:	CoinMiner sh XMRIG

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

GR

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6abab8be62d76db5e38000e4/reports/a3bf5bb9-410f-4431-a1dc-fbd4ae1376ec/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-09-28T17:14:00Z UTC

Last seen:

2026-09-29T19:33:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/c21e4431-0512-4060-bdec-0f6b1bbffcb3

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

6%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=skltmylenqyyxjfolqf4kdbsjlx5g7n74tq3ydnhrhae2ipjtrha._file

Hatching Triage xmrig

Result

Malware family:

xmrig

Alert

Create hunting rule

Score:

  10/10

Tags:

family:xmrig antivm discovery linux miner upx

Link:

https://tria.ge/reports/260928-xmkm4scf57/

Behaviour

Enumerates kernel/hardware configuration

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Checks CPU configuration

Discovers running processes

Reads CPU attributes

UPX packed file

Checks hardware identifiers (DMI)

Enumerates running processes

Reads hardware information

Executes dropped EXE

Family: xmrig

XMRig Miner payload

VMRay XMRig

Malware family:

XMRig

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/92973661646c/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/92973661646c318ba4ae5c0bc50c324aefd37dbfe4e1bc0da789c04d21e99c4e