MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b8b5836ccf5296203fdfc591e4e3c2accae53b73773559d7b29ca61b1dc49057. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | b8b5836ccf5296203fdfc591e4e3c2accae53b73773559d7b29ca61b1dc49057 |
|---|---|
| SHA3-384 hash: | efc59f390faa631b914424f7e5b10ddfa69c4145e06cb53bc90616cca89fc64ba1ba050cd2e7f7352dcccd1b19adf1bf |
| SHA1 hash: | d16d3038abb2e910c1ee000e7c067fb229d28974 |
| MD5 hash: | f871d0b969834a6876822b8771728648 |
| humanhash: | sixteen-texas-papa-mississippi |
| File name: | r.sh |
| Download: | download sample |
| File size: | 683 bytes |
| First seen: | 2024-11-27 19:21:32 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/plain |
| ssdeep | 12:lkC35Sc18HwCMaKLKfKC9NIh5igkCgLW1UCcBFpC97EuF8bNCaoG:lky5tvKimNIfXkrTNxcwzNKG |
| TLSH | T1590186D9B0A1153749CD6C4F7B69A8ED246920CF0A034FED5DFC629DE2BCD90F221085 |
| Magika | shell |
| Reporter |  abuse_ch |
| Tags: | sh |
Intelligence
File Origin
# of uploads :
1
# of downloads :
73
Origin country :
DEVendor Threat Intelligence
Detection(s):
Verdict:
Malicious
Score:
70%
Link:
Tags:
mirai
Verdict:
Suspicious
Threat level:
5/10
Confidence:
100%
Tags:
busybox evasive
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Threat name:
Text.Browser.Generic
Status:
Suspicious
First seen:
2024-11-27 19:22:05 UTC
File Type:
Text (Python)
AV detection:
1 of 38 (2.63%)
Threat level:
4/5
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
3/10
Tags:
discovery
Behaviour
Modifies registry class
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Enumerates physical storage devices
System Location Discovery: System Language Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh b8b5836ccf5296203fdfc591e4e3c2accae53b73773559d7b29ca61b1dc49057
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.