MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac
SHA3-384 hash:	1aeb32a06261f1d8da9b104fff2c9490807882a437842fbd6174d9f7b468b33487c03be7c9aef4a3cfd4f3318d1c659e
SHA1 hash:	c628fd9246960e510214679d855681e6541801e1
MD5 hash:	47a89c046da0aba2874b3cc850da6c9d
humanhash:	comet-ink-eleven-tennessee
File name:	dl202
Download:	download sample
Signature	DDoSAgent Alert Create hunting rule
File size:	3'741 bytes
First seen:	2025-07-26 06:01:58 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	96:tKBjI7HVpB00SXf0ktsF8vNmOfmW5ScNMMQq+:Zr4+
TLSH	T18C71A29803E101515302364F7FF927A8ADA483F2AD7B0FA5F861C9A864B459DE335F1C
Magika	shell
Reporter	abuse_ch
Tags:	DDOSAgent mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

URLhaus.3462419.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462413.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462403.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462409.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462416.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462399.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462402.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447675.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447676.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447679.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462417.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462395.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447674.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462404.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462410.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462418.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462407.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462397.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3447677.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462398.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462400.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462415.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462406.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462405.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462401.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462396.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462412.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462408.UNOFFICIAL

Alert

Create hunting rule

URLhaus.3462414.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68846f63c79df08ef095de20/reports/c53f538e-3ed1-42e5-a8e4-039cf13afee9/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/52f941aa-55c0-4a81-8db7-6be1351f1890

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-26 07:08:26 UTC

File Type:

Text (Shell)

AV detection:

8 of 35 (22.86%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=c2gn57v7275qfunnfahlv5x4r54umkso5ykmgxz4djyohsfkucwa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250726-hyd75sxrs7/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/168cdefebfd7fb02d1ad280ebaf6fc8f79462a4eee14c35f3c1a70e3c8aaa0ac