MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f
SHA3-384 hash:	e5b562dd1dafde2c1aba8657d8549f051f5ca2502d095220736de64a8aa9f1ec18b6c8f3246845db080e8a3300a59245
SHA1 hash:	c6dc865ca76cd87d63d380524d6ec84b1c1bbf78
MD5 hash:	5dc03e6c9d67d5f3b3499d31604abb4d
humanhash:	seventeen-high-uranus-speaker
File name:	bins.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'891 bytes
First seen:	2025-09-01 15:19:38 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:Uo8o8csVQmHeRoEKB536YN0uVCLQqwONI14ksNc4KlAxec6PsLihrUFiIm3xv:UJJxRjE636YNBCLha4JXUA5vL0UxIv
TLSH	T14F4141D9636326372DE2DA5776794004B1C0E0C6A8CAEE1DFDDD35E80D8DF4E6005A87
Magika	csv
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-01T12:35:00Z UTC

Last seen:

2025-09-01T12:35:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p HEUR:Trojan-Downloader.Shell.Agent.gen HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2806acb8-1c6e-4dd0-816f-6729cdf0f01d

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f

ReversingLabs TitaniumCloud Linux.Downloader.Medusa

Threat name:

Linux.Downloader.Medusa

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-01 15:20:53 UTC

File Type:

Text (Shell)

AV detection:

10 of 38 (26.32%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vyzvjtm3xm35bf2kixubmcqmhxivzjahvc24ohhcbu7gyte5yj7q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250901-sq7vlaap6v/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/ae3354cd9bbb/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ae3354cd9bbb37d0974a45e8160a0c3dd15ca407a8b5c71ce20d3e6c4c9dc27f