MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7
SHA3-384 hash:	0ff149a78bf451d069205896633e6826ab6d4582feb3ed4a31c3cc13551766ca6b2be11ae835198594ce371b3e47a2cf
SHA1 hash:	7812a384cb9e876b94948a1046e6747b3caf9fac
MD5 hash:	bb72a7f5c053d2da561855e9eab9f176
humanhash:	delaware-gee-pasta-venus
File name:	d883e0bfb63668dd.bin
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	619 bytes
First seen:	2026-10-03 16:03:51 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:fc+XD2YIUJRMZJ+B0f1KQhiYzaaZkQnRrR5QnRrAgSa3F6TRooQOp:U+T2YNJ2ZJJKKzaaSGBR5GB73IT6+
TLSH	T1B6F0DDE5B3010A32A8C782245D8F9ED79403B3552610388FF5CB280475F49403AF0B98
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	adliwahid

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

72

Origin country :

NL

Vendor Threat Intelligence

ACCE Unknown

No detections

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

unix shell

Link:

https://opentip.kaspersky.com/d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/def1c1e2-54a8-411a-98ed-6cf77e3df880

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

79%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-10-03 17:57:38 UTC

File Type:

Text (Shell)

AV detection:

3 of 38 (7.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3cb6bp5wgzun2privvaokwga2qba5dlsrfut7an224pibkrzfstq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion linux

Link:

https://tria.ge/reports/261003-th2t2ssz7n/

Behaviour

Writes file to tmp directory

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.31

Link:

https://yomi.yoroi.company/submissions/d883e0bfb63668dd3e28ad40e558c0d4020e8d7289693f81bad71e80aa392ca7