MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97
SHA3-384 hash:	7563ef8a784fb725f08a21c6e5e181d31735e12588377510ea26f0cbdd832b6945523b2b814b37412446da6870e68b5c
SHA1 hash:	aeb2f8c5df41050d36b38f8ec3159085d991af82
MD5 hash:	24a516fe71c8f4ead207e9ee478673ea
humanhash:	montana-jersey-undress-blue
File name:	b
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	393 bytes
First seen:	2025-12-06 07:28:48 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:h9OnFflE0FJ6D60hMwXJfLFmfLFNfZ5B6Ea5XKbF8dvwtMs:d0FJ873JkDhy7COs
TLSH	T100E092DDA4720071B84CBE2EE6A94B5CB051FBC5AAC02B3888DBBD51E81CD157482E23
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

35

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/69344d70bba50eaf042461c2/reports/fb331ca1-8015-4714-8b02-e4c09d5cd589/overview

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-06T06:34:00Z UTC

Last seen:

2025-12-07T01:41:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97/

ReversingLabs TitaniumCloud Script-Shell.Trojan.MiraiB

Threat name:

Script-Shell.Trojan.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-06 07:15:03 UTC

File Type:

Text (Shell)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=azupsa5fqobke5buonqy5gnstyzidy6giwzehrddtnr4tzagh6lq._file

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/0668f903a583/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.08

Link:

https://yomi.yoroi.company/submissions/0668f903a58382a2743473618e99b29e3281e3c645b243c4639b63c9e4063f97