MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5
SHA3-384 hash:	53c39a9344179ac50744364eb601806fb93abd274678cec5ada498985664e290121105fe57c80d3869e4593adf5b5a85
SHA1 hash:	8610b8206b0144a70d68e76d02fdf9bb89f6518f
MD5 hash:	5e7fc5def8429c9f1e8192065be2c29f
humanhash:	ink-washington-utah-leopard
File name:	jaws
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'825 bytes
First seen:	2025-08-23 06:27:51 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:cUltoc7tAPvWe+CIpc2odkUuuuaiGk/h8O3:cULdCIpc+aiG4p3
TLSH	T1F851C5EF712716A6499CAE0BF1B6846C7062C3C520968B8DF99C3CBD62DDA04B014B66
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

25

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive mirai

Link:

https://www.filescan.io/uploads/6919a09ba130a437f88eb0d4/reports/a231c060-f47d-464d-8236-99938136faf4/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/216583c6-df8c-4859-9c97-e979675e9dd7

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-23 07:10:21 UTC

File Type:

Text (Shell)

AV detection:

16 of 24 (66.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ajpevcucl345zql5xhclch4icyvlveyjjagvh5mznpcawxotn2sq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250823-hzs3paam7y/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/025e4a8a825ef9dcc17db9c4b11f88162aba9309480d53f5996bc40b5dd36ea5