h.sh

Classification: Malicious

h.sh is a malicious file sample. Linked to Kinsing malware. Reported by Triage and MalwareBazaar Abuse.ch, last seen 2026-10-17.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: KINSING (S0599)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Kinsing Triage 2026-10-17 09:45:00 2026-10-17 09:45:00 malicious-activity S0599 Kinsing
Kinsing MalwareBazaar Abuse.ch 2026-10-17 09:34:23 2026-10-17 09:34:23 malicious-activity

Tags

kinsing xmrig_linux antivm defense_evasion discovery execution linux loader miner persistence privilege_escalation rootkit

Sample information

Filenames
h.sh
MD5
c00205cbc66489cec715b695f9169f89
SHA-1
bb8e5ba66b66e4e13699bdc4596388a7d3f7b242
SHA-256
a0195bbbcb6d02d95ba13d593c607e190bbbc81a3e3c5405d8d18c81cc46e70b
First indexed
2026-10-17 09:34:23
Last updated
2026-10-17 11:15:05