MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472
SHA3-384 hash:	f91b4a7365ee4eb63c69eafcef7a835a22db92bd1502034bf49084ae92f851783dbe7f008a36062ee879cc32d053f83a
SHA1 hash:	96d82bcb6ffca10b13a7b72f16043baf507b3fa3
MD5 hash:	88d328a1dea18884991e0b008c79e851
humanhash:	item-july-connecticut-wolfram
File name:	jaws
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	4'644 bytes
First seen:	2025-08-31 08:18:04 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:cUltoFc7tA7PvWfe+CIjpk2odMAkUuBuuaxiwk/h8zOCO:cUVBCIjpksraxiw4dCO
TLSH	T1A6A1A4EF61671A964ACCAE0FB1B5946C7061C7CA30868B9DFD5C2C7D73DCA04B014B6A
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

32

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-08-31T07:00:00Z UTC

Last seen:

2025-08-31T07:00:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/3225e1f9-97fa-40fd-b57e-fb00098f3e8f

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472/

ReversingLabs TitaniumCloud Linux.Trojan.Geninst

Threat name:

Linux.Trojan.Geninst

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-31 09:20:49 UTC

File Type:

Text (Shell)

AV detection:

17 of 36 (47.22%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fvjnwnozcxn65ydb74r2xiqwf5ecdpoekyoscvrlyfmsmk3bkrza._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250831-ppt1kawr12/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2d52db35d915dbeee061ff23aba2162f4821bdc4561d21562bc159262b615472