MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cae605c7dcf1ea47e55483836b4ed8ed4bd433f8db48cf28cd1b147a8de124ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cae605c7dcf1ea47e55483836b4ed8ed4bd433f8db48cf28cd1b147a8de124ed
SHA3-384 hash:	dc992a742b6c7bbf5a4c1725abcf96c8c2967bd24871a3886e049ff706afed2304aa6a17b15d14bf528bcf4712368114
SHA1 hash:	ff60caf8f7119bb9c20bb86cfcc66b94204292ff
MD5 hash:	9ff5d12fd8e3aaa31474595e6fed9030
humanhash:	jupiter-october-cardinal-butter
File name:	0day.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'343 bytes
First seen:	2026-08-04 06:38:08 UTC
Last seen:	2026-08-05 05:15:33 UTC
File type:	sh
MIME type:	text/plain
ssdeep	48:nkHZ4Sap4SamVZ4SaE4SaD4SaA14Sat/4Sav4SaO4Sa74Sa+4SaC4+akO94C:nkHZkpk6kEkDkQkt/kvkOk7k+kCOkO9f
TLSH	T1EE41C8EE11418C789E63D937F265C12AB66AEED634CB3F09DECD7AE4808CD0431526D2
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

60

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-08-04T04:09:00Z UTC

Last seen:

2026-08-04T12:58:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/cae605c7dcf1ea47e55483836b4ed8ed4bd433f8db48cf28cd1b147a8de124ed/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/42ded051-e7d0-4cf6-b1b1-4365d196eb00

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/cae605c7dcf1ea47e55483836b4ed8ed4bd433f8db48cf28cd1b147a8de124ed

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cae605c7dcf1ea47e55483836b4ed8ed4bd433f8db48cf28cd1b147a8de124ed/

ReversingLabs TitaniumCloud Linux.Downloader.Morila

Threat name:

Linux.Downloader.Morila

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-04 07:14:32 UTC

AV detection:

14 of 24 (58.33%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zltalr646hvepzkuqobwwtwy5vf5im7y3nem6kgndmkhvdpbetwq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260804-hd9tbaee57/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

Executes a command shell one-liner

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/cae605c7dcf1/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.