MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 f70bc9a8e39eb36547717197efe88173c23c1b9c206d253f0e24a8aaadf0f915. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | f70bc9a8e39eb36547717197efe88173c23c1b9c206d253f0e24a8aaadf0f915 |
|---|---|
| SHA3-384 hash: | c4b92628b492b31ac89268724474f1379823652ef666af24b439bff081b76271e352e32b86876cd61a4eb1aaf6ea71cd |
| SHA1 hash: | 93fd5bfb701aaeff324cd70091dad54b57f38767 |
| MD5 hash: | 2cdb1f58b06fcfe8f6a96722b386d955 |
| humanhash: | early-charlie-cup-network |
| File name: | a31546bf |
| Download: | download sample |
| File size: | 280 bytes |
| First seen: | 2025-02-10 06:06:24 UTC |
| Last seen: | 2025-03-19 07:39:30 UTC |
| File type: | sh |
| MIME type: | text/x-shellscript |
| ssdeep | 6:Rah6CLKtv7a1DW8V9CQCM5gUH3sss8/D1+mtJ9:RSLO+1DoQZ5fs8sm39 |
| TLSH | T19AD02BC0E424BFE40D80184D30C61C62B46C14119E5E5CD4C85CE96C657C367781495E |
| Magika | shell |
| Reporter | |
| Tags: | alturastreet-icu sh |
Shell script dropper
This file seems to be a shell script dropper, using wget, ftpget and/or curl. More information about the corresponding payload URLs are shown below.
| URL | Malware sample (SHA256 hash) | Signature | Tags |
|---|---|---|---|
| http://185.100.157.127/storage/de373d0df/f0eee999 | 86c056be36634614be66908d7f0972d73bb765bad533391385adf9656ac0151e | Mirai | alturastreet-icu elf |
Intelligence
File Origin
# of uploads :
2
# of downloads :
96
Origin country :
DEVendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Link:
Tags:
n/a
Result
Verdict:
UNKNOWN
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh f70bc9a8e39eb36547717197efe88173c23c1b9c206d253f0e24a8aaadf0f915
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.