MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c
SHA3-384 hash:	209ce94b83ffe6474873b83e50468829bbca0cd670a21ade340ea9b45853e36d1ece8e5055e0cbb8391a46497349d3b7
SHA1 hash:	5df6de4f1c57f7158f76b934bb656d6bd4b3dc22
MD5 hash:	e6f54a4fde57bc94535f3a1d39e55def
humanhash:	foxtrot-stairway-sierra-asparagus
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	834 bytes
First seen:	2025-10-05 06:36:49 UTC
Last seen:	2025-10-06 04:37:40 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3XtM+YkfNI75HKpO+Il7ji1T6qlNTtG8NNkln:lm+Yk+5HeTIl7mR6Io8Nil
TLSH	T15F01DDEC63A161931B498DE4B0658468B02E96C272708F2E9D7B08E5D8DA3083976B79
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

43

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive exploit mirai

Link:

https://www.filescan.io/uploads/68e21232d4a0085473c082bf/reports/8048bf01-e505-4cc2-91e1-19edfc6ff67c/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-10-04T18:30:00Z UTC

Last seen:

2025-10-07T00:05:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/1ed1c584-1d10-409a-aea7-6187820fdb9a

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-04 23:24:44 UTC

File Type:

Text (Shell)

AV detection:

16 of 37 (43.24%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cqs54hkteiemlrkgsavfyx4sppjohdt4dnkhopws2675r6fxjjwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251005-hdtgbscp9t/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1425de1d532208c5c546902a5c5f927bd2e38e7c1b54773ed2d7bfd8f8b74a6c