MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 06240d6f9990a658a2ff844a1f591256c6088ac086dc036e700f73f55504c292. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	06240d6f9990a658a2ff844a1f591256c6088ac086dc036e700f73f55504c292
SHA3-384 hash:	c89b116b675cdebbc348a86041fda3e1e19e591bd961876b97cae79ad412c9b56395e1be4b46ccfe4f1525676ca39c65
SHA1 hash:	57f7c1f72bb2a69ad5ee26daa3d3a861470ac105
MD5 hash:	81e0f637ed86a4e4e50833c9bb09f426
humanhash:	quiet-monkey-princess-wisconsin
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	980 bytes
First seen:	2025-01-08 23:21:39 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:sXOsYxPC7JlqZ1ZUJZI4WAdMhWo07h5BD/hHrZhHdShbrThSw0w:sXCZG+1ZuZI4Wu8Wj75Hr3HQ1f
TLSH	T17C115BCE41F2AE305094542972936A6DB845C6CA07080E487EAD4A36ABCCAB9B464F80
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

121

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-34.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=677f0952c029bd73f2876b23linux22vpnfull_triage

Tags:

hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/677f089a6ee75e0d89aed805/reports/f104b6bb-1cde-4b65-a152-7e2aed9cef4d/overview

Nucleon Malprob Benign

Score:

11%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/06240d6f9990a658a2ff844a1f591256c6088ac086dc036e700f73f55504c292

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/06240d6f9990a658a2ff844a1f591256c6088ac086dc036e700f73f55504c292/

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-01-09 00:04:11 UTC

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=aysa234zsctfrix7qrfb6wisk3darcwaq3oag3tqb5z7kvieykja._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/250108-3cjkyszqen/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

File and Directory Permissions Modification

Executes dropped EXE

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.06

Link:

https://yomi.yoroi.company/submissions/06240d6f9990a658a2ff844a1f591256c6088ac086dc036e700f73f55504c292