MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1021d4629b5d66de532149303fc06281d118c87bc8a473a2ca98e3c87e07d6d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1021d4629b5d66de532149303fc06281d118c87bc8a473a2ca98e3c87e07d6d3
SHA3-384 hash:	a42dfd32f6c4dffe842f55189357c4c29b0f03d7667769a83f0c5f103339da6b5db7d8f74e4658bdec70674c7574aecd
SHA1 hash:	f6949bce88472075e00a0d9c26e877959cd714d3
MD5 hash:	654cdddf04ee6be3efc808ae761c4559
humanhash:	wolfram-blossom-sink-angel
File name:	f.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	375 bytes
First seen:	2025-05-16 09:38:40 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:ebgfr3w5/KjUAFjbKTVpJjFIcMW8MIcMW8NsIV8aCTIcMGMIcMGNsIAaQu:3rWKIw+3JjecMl7cMleIea5cMG7cMGN9
TLSH	T165E09BC502B0D93550495EE3B22455375BC5C9C99DC00E5875CA14B3D50DC14BD95F65
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

58

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.SH.Mirai.C.gen.Camelot.10777.16356.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=682707c24a59e5a2ce0517fclinux22vpnfull_triage

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/682707b915ed82cd53d7a2c4/reports/850130c5-8b99-4531-b4fe-7922cdccbf4f/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/1021d4629b5d66de532149303fc06281d118c87bc8a473a2ca98e3c87e07d6d3

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1021d4629b5d66de532149303fc06281d118c87bc8a473a2ca98e3c87e07d6d3/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=caq5iyu3lvtn4uzbjeyd7qdcqhirrsd3zcshhiwktdr4q7qh23jq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250516-lmpfhsslz4/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1021d4629b5d66de532149303fc06281d118c87bc8a473a2ca98e3c87e07d6d3