MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 064dacdf4c84163d1b5317c06fad65864e44325e9792f0cb05a00e280d0e213f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	064dacdf4c84163d1b5317c06fad65864e44325e9792f0cb05a00e280d0e213f
SHA3-384 hash:	85aa272cdea28e993d437be789bf0859d2efcf775a4e767a911feceb210cd066fbb1080b02c6f40ccdcd5f949fa38710
SHA1 hash:	97f68a7872b803ed5403d70d9c495e106344b13b
MD5 hash:	7afeed9b7cf8934dc4651a69d46890ef
humanhash:	tennessee-sad-hamper-north
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'006 bytes
First seen:	2025-11-26 22:44:40 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3JeulQJeWsVQJegNIOOAQJepNK4HQJehEQJeXQJe6TDkwQJeCsHQJenKAQJe2f:3J3Jzu7NNIDcKx2hfTDkJk0PZoRwlHR
TLSH	T1CA116D9D73A59816EF2C4EC8B079C02CF668C1E1FAB44E85F07D44F5649D31C2268B3A
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6927830dc17466c5963684eb/reports/7c07db26-bd53-4198-9687-1babd726084a/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/c0a730e5-e353-4b2d-8e36-fe1b0cfb96c2

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/064dacdf4c84163d1b5317c06fad65864e44325e9792f0cb05a00e280d0e213f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/064dacdf4c84163d1b5317c06fad65864e44325e9792f0cb05a00e280d0e213f/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-26 22:45:36 UTC

File Type:

Text (Shell)

AV detection:

12 of 36 (33.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=azg2zx2mqqld2g2tc7ag7llfqzheims6s6jpbsyfuahcqdioee7q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251126-2pmygagp3t/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/064dacdf4c84163d1b5317c06fad65864e44325e9792f0cb05a00e280d0e213f