MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9
SHA3-384 hash:	361e1f559e5e7a3ec99bcf08be2f20b0b7186670e824fee7afce27c2b0e6f3fdc9b2caeb6633ceea5c7daddfd8765a73
SHA1 hash:	d844febc8e67b15fedd59ec09d7f1e0303ff38ac
MD5 hash:	bd4255eb00ec36e690b784f7b8012d02
humanhash:	september-blossom-football-fix
File name:	run.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	4'068 bytes
First seen:	2025-10-28 12:46:27 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:FS2JMZnbiBxQuZ44cvyZpbwzFhM3OT/TbTKTNTb:FS2JMZnbiBxQuZhpbws
TLSH	T1CB814F8E0644D731D70D8A1EF7F2B1B4910FA283E6EBCF46B954186C0EC5D4CB686E52
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

46

Origin country :

DE

Vendor Threat Intelligence

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-10-28T10:51:00Z UTC

Last seen:

2025-10-28T11:10:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/bac2e999-84e1-493b-b5ca-c6ac30821138

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9/

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-28 12:47:46 UTC

File Type:

Text (Shell)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=a5hi7fosizjvkcg2qsqmnwhmcntu55gfgnfs4bi7cd4o3pk4pleq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251028-pz1wvsgq7s/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/074e8f95d246535508da84a0c6d8ec13674ef4c5334b2e051f10f8edbd5c7ac9