MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 c8844ac426e19246c8a73b9952deda131b6bb452fafe4dbb984a8895914a9046. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 2
| SHA256 hash: | c8844ac426e19246c8a73b9952deda131b6bb452fafe4dbb984a8895914a9046 |
|---|---|
| SHA3-384 hash: | 818e2d69d689bb6d614128b05e3fd9479411e56d1f14ac71032291c7736ebf9221ac1566b4d9f31866995ab070d6d1f6 |
| SHA1 hash: | 0af4e92937c9f1a8376a56e2445d76e5156e8eb7 |
| MD5 hash: | e8fd3e778e32b7dbcca44128cd15744c |
| humanhash: | speaker-mexico-indigo-seven |
| File name: | watchsoftware.sh |
| Download: | download sample |
| File size: | 4'863 bytes |
| First seen: | 2026-06-19 18:10:46 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/x-shellscript |
| ssdeep | 96:IzLiPYa3jvvc9TbHlLYYLOwJmwvwSmt7rzzw:I3iBT3+TbFBywQwYSYnzM |
| TLSH | T178A194727F916B303A99C11C8A9ED252766B38BB36103868705D31907BEC71E51B2F74 |
| TrID | 70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1) |
| Magika | shell |
| Reporter | |
| Tags: | sh |
Intelligence
File Origin
# of uploads :
1
# of downloads :
42
Origin country :
DEVendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Verdict:
Clean
File Type:
unix shell
Status:
terminated
Behavior Graph:
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
6/10
Tags:
discovery linux
Behaviour
Reads runtime system information
Reads CPU attributes
Enumerates running processes
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.31
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh c8844ac426e19246c8a73b9952deda131b6bb452fafe4dbb984a8895914a9046
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.