MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771
SHA3-384 hash:	a8442bd4803fa693b70845ad1ae1052307e22ed2e67ed3d13cded396100f5d32cc2a741b06c8d3d9fd754c53c3e30d8b
SHA1 hash:	9247f1e4cbd676a2f02049201204eb06e1068a74
MD5 hash:	a4bc9e249113a53fa47dac34384933ae
humanhash:	hot-solar-maine-victor
File name:	c.sh
Download:	download sample
File size:	1'248 bytes
First seen:	2026-01-17 21:10:33 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3iv5U02Ov5h8NINMbv53LKev5Uv5vv50Qev5VW7Mv5HQTjuv5fzwhv5n+v56Cm:3J3jbNIWKs7QTgzwDGCyA
TLSH	T1F2212C9D03E1718AEA130DD86810C04EB3FEB3E3B790C650AEDF5864E0AD2487639A75
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

47

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/696bfad83dd9d20950586c07/reports/101b95a0-9c3f-41fa-b8e9-ca0dee68301c/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2026-01-17T18:14:00Z UTC

Last seen:

2026-01-18T14:38:00Z UTC

Hits:

~10

Detections:

HEUR:Backdoor.Linux.Mirai.h HEUR:Backdoor.Linux.Mirai.cw HEUR:Backdoor.Linux.Mirai.ba HEUR:Backdoor.Linux.Mirai.b HEUR:Trojan-Downloader.Shell.Agent.cl

Link:

https://opentip.kaspersky.com/f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5cc06e90-608d-40e4-b483-acd0a2957d10

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771/

Neiki Backdoor.Linux.Mirai

Verdict:

Malicious

Threat:

Backdoor.Linux.Mirai

Link:

https://tip.neiki.dev/file/f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-17 20:53:21 UTC

AV detection:

9 of 36 (25.00%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6swn2lzlin56phpvqun5sbz73hfhssi7semrz4asv22tz5fk65yq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260117-z1fx7ads2c/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f4acdd2f2b437be79df5851bd9073fd9ca79491f91191cf012aeb53cf4aaf771