MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd
SHA3-384 hash: d77206fc6cf81e186420cd7157c76172570c4c8371b151e80a17ff7293d376e65d912e4dcfbb78d54824b0da93017d20
SHA1 hash: 3df94df81cb7b4489090284de4f5a44115676176
MD5 hash: fdc53430902e607541a49bbcd79bfeba
humanhash: march-west-princess-fish
File name:bins.sh
Download: download sample
File size:857 bytes
First seen:2026-04-04 11:58:27 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 12:lHZLTPFKcqL8sPgUgqKEM4yCLSUxXKAFhBEBFDgq4ZegqOEn9Ny7o2WA7:V1C8sPgwMfCGUwgYXgkG49Ny7oP4
TLSH T14811AB6A5681E42477248F69E0A9817134CE3D43C4990BA47CEF5A397BFDD98A240E72
Magika shell
Reporter abuse_ch
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
35
Origin country :
DE DE
Vendor Threat Intelligence
Gathering data
Detection(s):
SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL
Create hunting rule

Result
Gathering data
Verdict:
Unknown
File Type:
Link:
https://opentip.kaspersky.com/c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd/results?tab=lookup
Score:
5%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd/
Verdict:
Malicious
Threat:
Trojan-Downloader.Shell.Agent
Link:
https://tip.neiki.dev/file/c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd
Threat name:
Linux.Downloader.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-04-04 11:59:15 UTC
File Type:
Text (Shell)
AV detection:
2 of 24 (8.33%)
Threat level:
  3/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=yxmvtyh2i6uteedsz5ndynvsxwarbae25fz24dfnbnxfcc6ezxoq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/260404-n5tjasft61/
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/_mb/c5d959e0fa47/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3811080/
  
Delivery method
Distributed via web download

Comments