🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2e05ab012733f8684972c93ed7ff087fc3b610e0b15b71725c4ad5bb7880d68. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d2e05ab012733f8684972c93ed7ff087fc3b610e0b15b71725c4ad5bb7880d68
SHA3-384 hash: f2ef038f382af0ba74b259a1b84cc7ee01b43f08d2bcba46817f2f475b1dfe12771d049df7431c8575d19c27ab20ce95
SHA1 hash: 21e97bcb9a2f534dcf04ed7e871487aa6ed46dd4
MD5 hash: 5d42763939ff46858e4d6b4a03ab997a
humanhash: ack-floor-black-fourteen
File name:bash.sh
Download: download sample
File size:1'295 bytes
First seen:2026-09-11 18:53:46 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 24:8JWNQ8aHDwjsKT10aUYLopm8yFPNmbAoajPewjCT26lQ+yCAdA+hzjEviPAN:eWKwjh106kp4Nfr6HTnQ+ytAwXEuAN
TLSH T1C821A5B2390B72B34434ADF18112B036FF46002928117D78355C401EF022DDE40BA5AF
Magika shell
Reporter BlinkzSec
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
https://github.com/nanopool/nanominer/releases/download/v3.10.0/nanominer-linux-3.10.0.tar.gzn/an/an/a

Intelligence

File Origin
# of uploads :
1
# of downloads :
4
Origin country :
AT AT
Vendor Threat Intelligence
No detections
Verdict:
Unknown
File Type:
unix shell
First seen:
2026-09-11T16:28:00Z UTC
Last seen:
2026-09-11T23:35:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/d2e05ab012733f8684972c93ed7ff087fc3b610e0b15b71725c4ad5bb7880d68/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/1f0537fd-a52d-4ff4-b7ee-883e8703a644
Behavior Graph:
Download SVG
%3 guuid=54c38db9-1700-0000-3fb5-d9b650090000 pid=2384 /usr/bin/sudo guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386 /tmp/sample.bin guuid=54c38db9-1700-0000-3fb5-d9b650090000 pid=2384->guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386 execve guuid=d526cabc-1700-0000-3fb5-d9b653090000 pid=2387 /usr/bin/apt-get guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=d526cabc-1700-0000-3fb5-d9b653090000 pid=2387 execve guuid=36bfcac0-1700-0000-3fb5-d9b65e090000 pid=2398 /usr/bin/apt-get guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=36bfcac0-1700-0000-3fb5-d9b65e090000 pid=2398 execve guuid=75494dc4-1700-0000-3fb5-d9b665090000 pid=2405 /usr/bin/mkdir guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=75494dc4-1700-0000-3fb5-d9b665090000 pid=2405 execve guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407 /usr/bin/wget dns net send-data write-file guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407 execve guuid=051303e7-1800-0000-3fb5-d9b6cc0b0000 pid=3020 /usr/bin/tar write-file guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=051303e7-1800-0000-3fb5-d9b6cc0b0000 pid=3020 execve guuid=2142b25d-1a00-0000-3fb5-d9b6560d0000 pid=3414 /usr/bin/mv guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=2142b25d-1a00-0000-3fb5-d9b6560d0000 pid=3414 execve guuid=5a55925e-1a00-0000-3fb5-d9b6570d0000 pid=3415 /usr/bin/cat write-file guuid=99f68abc-1700-0000-3fb5-d9b652090000 pid=2386->guuid=5a55925e-1a00-0000-3fb5-d9b6570d0000 pid=3415 execve guuid=8344b6c2-1700-0000-3fb5-d9b661090000 pid=2401 /usr/bin/dpkg guuid=36bfcac0-1700-0000-3fb5-d9b65e090000 pid=2398->guuid=8344b6c2-1700-0000-3fb5-d9b661090000 pid=2401 execve 4f6baed0-9587-596c-82b3-fd721afe4cc1 10.0.2.3:53 guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407->4f6baed0-9587-596c-82b3-fd721afe4cc1 send: 164B 75aab096-419b-50ef-be46-7d76b6a90e4c github.com:443 guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407->75aab096-419b-50ef-be46-7d76b6a90e4c send: 802B f8c5e44f-328d-5324-8bbd-da50752b9120 release-assets.githubusercontent.com:0 guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407->f8c5e44f-328d-5324-8bbd-da50752b9120 con f0eebea5-e97d-507c-a771-59cac353877c release-assets.githubusercontent.com:443 guuid=e97dd0c4-1700-0000-3fb5-d9b667090000 pid=2407->f0eebea5-e97d-507c-a771-59cac353877c send: 1653B guuid=a0fa57e7-1800-0000-3fb5-d9b6cd0b0000 pid=3021 /usr/bin/gzip guuid=051303e7-1800-0000-3fb5-d9b6cc0b0000 pid=3020->guuid=a0fa57e7-1800-0000-3fb5-d9b6cd0b0000 pid=3021 execve
Score:
1%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/d2e05ab012733f8684972c93ed7ff087fc3b610e0b15b71725c4ad5bb7880d68
Gathering data
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2lqfvmasom7ynbexfsj6277qq76dwyiobmk3ofzfyswvxn4ibvua._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments