MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff
SHA3-384 hash:	784c725233fb03f8d0effa27b2fa6a0b95230d547da16ffdffc36af1285b4c23644c43c661737e5f7a7cb8b05a3b7f59
SHA1 hash:	1fa475ea8d3f157b4bdcf1f14afd0a27e53d4ed6
MD5 hash:	dcb62fd63278efb98abbbe91bac29a4c
humanhash:	eight-robert-zebra-india
File name:	dvr
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'792 bytes
First seen:	2025-07-25 17:51:09 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:2XUhUYY+sXUoUQsXUKgU1SKosXUZUXfesXU+UUsXUEgU8DDsXUoUgsXUSUqPsXUJ:2w3sfsv6Kos5fes9sc3sLsns4sOSs5
TLSH	T168318FD95162C5352D6A9CA376A98929318CD9CFB8E8AF0C58DD3DF88C8FF047082743
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

26

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/387fce76-5c11-41b2-a326-a05c4677b7ca

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff

ReversingLabs TitaniumCloud Linux.Downloader.Morila

Threat name:

Linux.Downloader.Morila

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-25 07:57:28 UTC

File Type:

Text (Shell)

AV detection:

19 of 35 (54.29%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=eg3bj5qqqo7wedaoyqyh5vae4lgsxo2zomqpkxdgecrayupq2x7q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/21b614f61083bf620c0ec4307ed404e2cd2bbb597320f55c6620a20c51f0d5ff