MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 010ba2ee7ff600411e8db9407557395c7828819fd61bfd9ad2ecf623a8cac263. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	010ba2ee7ff600411e8db9407557395c7828819fd61bfd9ad2ecf623a8cac263
SHA3-384 hash:	73f7d5afac1eb25e5a07f231be28610a1da94e7971ce2b0f945860438208e1d73ed7a06fa7b2f5da574b03e4f98852ab
SHA1 hash:	d473da82daad66d94d6e241220935268a1b6ddb9
MD5 hash:	e20dc8452d0cd46062a71aa0fe445e98
humanhash:	missouri-crazy-two-cola
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'153 bytes
First seen:	2025-07-11 05:00:21 UTC
Last seen:	2025-07-12 01:42:16 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:2dYC3gdYBI3dYuNNIUuiupd6n4K6xdKmr8dejGpdZNmBpdjdr7dw6odNSdYV2fxv:2d6dBdJ2HpdJzdKmr8dejGpdZNmBpdjT
TLSH	T10121218D0EA7904F54388F33E49B87684B9E82C7F4B4AE6565CD4CB3548DB04B439E5B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68709a96900df8e7f869acealinux22vpnfull_triage

Tags:

downloader trojan agent

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68709a9830bf733323370344/reports/86e35468-0752-4f47-bd7f-b35b2daeb42d/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/fe642819-7024-4624-a801-627e464558b1

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/010ba2ee7ff600411e8db9407557395c7828819fd61bfd9ad2ecf623a8cac263

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/010ba2ee7ff600411e8db9407557395c7828819fd61bfd9ad2ecf623a8cac263/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-11 05:01:11 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=aef2f3t76yaechunxfahkvzzlr4cram72yn73gws5t3chkgkyjrq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250711-fm7zzaaq8z/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/010ba2ee7ff600411e8db9407557395c7828819fd61bfd9ad2ecf623a8cac263