MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 386a55775dfcbfec1d35749a938cba53c04dcc43e587abcb8466b5a68b39ce01. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	386a55775dfcbfec1d35749a938cba53c04dcc43e587abcb8466b5a68b39ce01
SHA3-384 hash:	9f2466253fff7eb2e8f998b33ffce099f45772f55947fab38bac25da5ace3361c0bfc4efad518d2aaee9952f88313ae6
SHA1 hash:	17c3a8e4ed0fb8cc9ce4e4a0736fe8a919163f5e
MD5 hash:	7f6094e829e372b31432e8ea2b465a84
humanhash:	mango-december-ack-mirror
File name:	ftp.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'644 bytes
First seen:	2025-03-02 16:46:35 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:IjCoCfhCvoCN2CWmh7CP+C9CYaCQC0rCrCVCR:XZ0vZBWm4/4cxT2gR
TLSH	T1C851759E24A567B47CE3146333695C1475CBA217BCD31D466BDCB0E48CCED82B2D44EA
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

94

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-3.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c48c74c8d04e92a4be671elinux22vpnfull_triage

Tags:

malware

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/67c48b9c3c5f644bd93efcd3/reports/dfbe82b7-3aac-4b85-945b-e4c157572a0d/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/386a55775dfcbfec1d35749a938cba53c04dcc43e587abcb8466b5a68b39ce01

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/386a55775dfcbfec1d35749a938cba53c04dcc43e587abcb8466b5a68b39ce01/

ReversingLabs TitaniumCloud Linux.Downloader.MiraiA

Threat name:

Linux.Downloader.MiraiA

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-02 16:47:20 UTC

File Type:

Text (Shell)

AV detection:

21 of 38 (55.26%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hbvfk5257s76yhjvosnjhdf2kpae3tcd4wd2xs4em222nczzzyaq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/250302-vak21aywb1/

Behaviour

Writes file to tmp directory

Reads runtime system information

System Network Configuration Discovery

File and Directory Permissions Modification

Executes dropped EXE

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/386a55775dfcbfec1d35749a938cba53c04dcc43e587abcb8466b5a68b39ce01