MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1
SHA3-384 hash:	ff7cda47345d341baf6f22e7da978762b6bf09646709141b7a9eebc2937bb3b192911fd267f505f76cae5c57f8ff6285
SHA1 hash:	fe8388ef221442768ef569891b5162913db90e5f
MD5 hash:	0421fb471e06fad0e4355453353dd36f
humanhash:	victor-lemon-nuts-stream
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'148 bytes
First seen:	2025-07-26 10:45:34 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:0jyN5Z5Il+VjyNkZkIU+VjyN6NIF6/AA+VjyNHC4K/dEH+Vjy9ju5+VjyYOR5+Va:j+JoNIsBK1KEdx18mCHZIe8tnqL/Sxn
TLSH	T1E2212C8F9E315C0492084FF56096B5106B5BCFD0E3BD8B89E46C58B66D94B14F3CAE2B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6884b1d4c79df08ef095e8ed/reports/fe02fa66-7946-4422-80eb-5108b8f2e16f/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/58322354-c4e5-4c43-a50d-0ed645483510

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-26 10:45:39 UTC

File Type:

Text (Shell)

AV detection:

14 of 35 (40.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=avmpyeihslbqx5r2htiitynvrighz63jspi4hq56shlr43azs7iq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250726-mtpwasyzdt/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0558fc110792c30bf63a3cd089e1b58a0c7cfb6993d1c3c3be91d71e6c1997d1