MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89
SHA3-384 hash:	e8c181e5614abe73c69a887dfb1fc2df462475ba1ed0b2e914a5e186206b0d0fd33923e21b20fccd15ec22a7f64344bb
SHA1 hash:	38ae5ff4327e568d0c66e49981fb9cedc03121e7
MD5 hash:	206214f9ca5ff85f80b18fd8f59c5efe
humanhash:	oranges-carolina-alanine-purple
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'756 bytes
First seen:	2025-04-27 01:44:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:QvZi4w8+ifJNnABw4RHfWCn1BxZ2k3nBbFnXuYhqJ:AZi7ihNABw4RHuC1BdFnXucqJ
TLSH	T18931B498BE92DFE26F8ADF48F133D646F043DA9320508A156CA9207DCCBD9483035E4B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

101

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

95.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680ddb49cc5fb3600cc329d6linux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/680d8c2d212716475faf61cf/reports/9933fc59-9903-4d59-bb54-92b5a11195a5/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89/

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-27 07:10:30 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hh6nyanmxpkxyew5747s64hvqqkuhygpds7mue2yjiayllgkzweq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250427-hzh8gsvyes/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/39fcdc01acbbd57c12ddff3f2f70f5841543e0cf1cbeca13584a0185accacd89