🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 198f7199d54b39b1fc8262477f776e1d233d432092e2189aed0ce538df8ae340. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 198f7199d54b39b1fc8262477f776e1d233d432092e2189aed0ce538df8ae340
SHA3-384 hash: f6060610cfa44054ee388dfeeabd888a210091ffc6406772c14ec92fa7214ef66bc6b7119bd1e9e889f7b29c4e966fdd
SHA1 hash: 8a0e70fa348d79c87b9d030b26ec05a986e8e1fc
MD5 hash: 044f0de07ccf3a6025560552dbd9cc5b
humanhash: item-cardinal-mobile-skylark
File name:cat.sh
Download: download sample
Signature Mirai
File size:1'482 bytes
First seen:2025-05-24 03:07:30 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 24:ItH2aOYQwzAuytCU1iJHJNNOLm8NctlqMou2WnCn210+sAOAnLrhr+5N:ra7Y4pNElCIQE210+5/wD
TLSH T184319B8E5AD64751C28DEE9FF273D3E95C1C4783645B8910ECED4CA188E981B2027797
Magika shell
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://106.248.251.189:33741/x86_64fec2dc0ec3ecb8851efb34051539fea5d8216a97b481d5d828566a93b8197821 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/aarch642717b1d68baf95b377b7f031790ecde180e20997b3fa1d19deeb8a8ffc0f90b9 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/armhf2f2babec3f475ad4a831d369ade864e4b52d1f8fd33d36073f31ce7c675791b1 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/arm643f7bb3a780a074ce600f23c199eb7a649bac6af333660777c455eb018568ab Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/i686aa50e2ae5058c0cbec24440b7bcf4d077ebdcd8a0df0c8860f0045777d57a93d Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/m68kfc7dd19ab52c6158fcbd93da6653d1086e68af76926b9f098972536cd41dc8d5 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/mips78c7fc9567bb62f80757de7422ac480aeba2402056cf2fe49863a4c6de6bf3e6 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/mipsele74ac16f72a093cb2d3f0bf5ef2e198e3f26675be3f74c79401626c6a9e961d2 Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/powerpc647bd2f710c42d61b644b87924d74c06e1649128874a6fb0bddef364f6be4f4e5d Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/sparc63f490f2197f3541e83769406921d238be86be8a6f698c14965af7b46aee6fdd Miraielf mirai opendir ua-wget
http://106.248.251.189:33741/sh4590175585b6411c74cadbc0a9459a023b8612ecdb2ea21497f1d9204146f0a7d Miraielf mirai opendir ua-wget

Intelligence


File Origin
# of uploads :
1
# of downloads :
93
Origin country :
DE DE
Vendor Threat Intelligence
Threat name:
Script.Trojan.Multiverze
Status:
Malicious
First seen:
2025-05-24 02:30:57 UTC
File Type:
Text (Shell)
AV detection:
12 of 38 (31.58%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

sh 198f7199d54b39b1fc8262477f776e1d233d432092e2189aed0ce538df8ae340

(this sample)

  
Delivery method
Distributed via web download

Comments