MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e
SHA3-384 hash:	3aa4f27cba31922209c463770388668f87db47e43e846c96a7d891d16919591a1a210f78a7311017992b4abf1086ea93
SHA1 hash:	19170a8b3eb64ea28f63586d84af0de3dbcb55b5
MD5 hash:	ac1758f544243a03414600559bced44f
humanhash:	vermont-floor-jig-apart
File name:	toto
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'309 bytes
First seen:	2025-08-17 15:54:49 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:TJNi4wh3G1949Q9Y9M91AFgW9ptEIcsGkL6L8qSL8qli8qWF8qV5:lNi2QYwECFZ9f5DGLWLpiCFp5
TLSH	T1604128EF1361B5F42981CCDAF6630A38DA49E5E30CC20D6CF99D95525ADCD5C7024DD0
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-36.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Linux/TrojanDownloader.SH

Verdict:

Malicious

Labled as:

Linux/TrojanDownloader.SH

Link:

https://www.hybrid-analysis.com/sample/3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/e53014a6-be67-4ead-a4f2-fc46d86d5e80

Nucleon Malprob Malware

Score:

89%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e/

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-17 18:54:30 UTC

File Type:

Text (Shell)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hjsaix4ptyx5ppodhvciwnwqepjp3f7z57a5nu3epumwllqnl2pa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250817-xkc59axlt7/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3a64045f8f9e2fd7bdc33d448b36d023d2fd97f9efc1d6d3647d1965ae0d5e9e