MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd
SHA3-384 hash:	1816aa9a6a3673a1a4e53a85386e9e655edaf366fc5f3e718e35f5042c16311835db425d643edd2d79dee73a275973bf
SHA1 hash:	51249176399a4df223c6071c6376842c8a6e9b1b
MD5 hash:	7cb13c60ffd8d43405189cd6f3471ce6
humanhash:	lamp-ten-triple-comet
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	834 bytes
First seen:	2025-10-07 05:03:24 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:h8d83Yq88NI7N8EKd89+Ih82jA8OT5m8HlZ8ats8rZ8gq8sn:hwiYqKNr0/IhXM95ma64Z0Z
TLSH	T13C0156DF2235637606098DE9E063544DB02FD1C832B50F5BDDC42CF2D8D5D01B125E69
Magika	asm
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.32160.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/68e49f3ef679cead12bc28b1/reports/2212ec86-ecb8-480d-af5a-a938448af34b/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-10-07T01:21:00Z UTC

Last seen:

2025-10-07T01:38:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/38aec579-d7ee-47d5-b02f-37bd47323d10

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd/

ReversingLabs TitaniumCloud Linux.Trojan.Alevaul

Threat name:

Linux.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-07 05:04:20 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gsk3iqnb7r7addwwzznxfr5xcwl77tibalpvdsi2xom4xft67xgq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251007-fp66fsyxcx/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3495b441a1fc7e018ed6ce5b72c7b71597ffcd0102df51c91abb99cb967efdcd