MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f01bbf77fa7d6b9f9023874793cff8ebd904a3965a43a717f28f7c1474e7921. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1f01bbf77fa7d6b9f9023874793cff8ebd904a3965a43a717f28f7c1474e7921
SHA3-384 hash:	6c4d26047edc6cfc30b1c0317c1915d6d396b025a59623adb7542cbff5f9abde039dc17a7084fb79d1c042c1b476ecfb
SHA1 hash:	221575e04cf320288980e011437eb56e3b4c9580
MD5 hash:	f9300ad929b1049c3b0c5d9d560fc2fb
humanhash:	uncle-march-steak-december
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'592 bytes
First seen:	2025-01-21 02:27:00 UTC
Last seen:	2025-01-21 14:16:50 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:Zov4CB7vihUcv2ILvuvt0Rj46I6jAwc466oc9:Zov4CB7viGcv2ILvuvt0Rj5I6cwR7f9
TLSH	T1B03161C008C1273ECC8895A63372503D5129ADC9BE6B5FD8EECF18E5AB50B92F420D4C
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

95

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=678f06e2b5602ee8cdae1861linux22vpnfull_triage

Tags:

phishing mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive mirai

Link:

https://www.filescan.io/uploads/678f05febd0788272e588652/reports/4644e194-21a0-4ba1-b701-a0b6693e24e6/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Susipicious

Score:

65%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/1f01bbf77fa7d6b9f9023874793cff8ebd904a3965a43a717f28f7c1474e7921

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1f01bbf77fa7d6b9f9023874793cff8ebd904a3965a43a717f28f7c1474e7921/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-18 00:08:54 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=d4a3x537u7llt6ichb2hsph7r26zasrzmwsdu4l7fd34cr2opeqq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion linux

Link:

https://tria.ge/reports/250121-cxgc8a1phj/

Behaviour

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/1f01bbf77fa7d6b9f9023874793cff8ebd904a3965a43a717f28f7c1474e7921