MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 267da5eba3c2e6cb7030c031b482910f4e37b0218f8318976fa67bd6c730fe0b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	267da5eba3c2e6cb7030c031b482910f4e37b0218f8318976fa67bd6c730fe0b
SHA3-384 hash:	80d148fd56fc12f68abde90ca4b2da9fd1ccdf9e1d7c1ec2db9d9971b82b98cdc940a1bd6dac46d2c37cfee71b2da513
SHA1 hash:	089b7c6ee419101e9b3696d8c8a495c8e865b2a6
MD5 hash:	12150654668a73d2969637faedb36788
humanhash:	happy-bluebird-johnny-iowa
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'002 bytes
First seen:	2025-01-06 17:11:26 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:GBj+p3Xw+nNIBSkA+soKSu+/xH0KA+PuQlaq+3l9E+J9oE+hF3lqj+LTxyMA+Z3G:GBmtNIIAKSFTVuqa3l9/9sqG/PV4n
TLSH	T15011809D6150541D04ECCD0D32AD2A109E7BC2C9B8B18F19DDB5483754A96ADBE6CF0F
Magika	shell
Reporter	abuse_ch
Tags:	mirai Moobot sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

125

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=677c0fa5c029bd73f2846c1dlinux22vpnfull_triage

Tags:

gafgyt mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug bash lolbin remote

Link:

https://www.filescan.io/uploads/677c0ee6a87b2681470554c5/reports/40d40589-5627-498b-bc6f-e5005fc602be/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/267da5eba3c2e6cb7030c031b482910f4e37b0218f8318976fa67bd6c730fe0b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/267da5eba3c2e6cb7030c031b482910f4e37b0218f8318976fa67bd6c730fe0b/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-06 17:12:05 UTC

File Type:

Text (Shell)

AV detection:

12 of 38 (31.58%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ez62l25dyltmw4bqyay3jaurb5hdpmbbr6brrf3puz55nrzq7yfq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250106-vqtdbaslas/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI MooBot

Threat name:

MooBot

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/267da5eba3c2e6cb7030c031b482910f4e37b0218f8318976fa67bd6c730fe0b