MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e
SHA3-384 hash:	8e168e772bf6a8edb058c061cae8dae0405ef7905ec3576802cfadce6927c6df696d2257b009b1ae14aefa8cab362479
SHA1 hash:	e29c4b9790332c6bef2174e531bcef3d3eb8dd7a
MD5 hash:	4629c3e1df7d8f4229d84c07f3f1f180
humanhash:	spring-arizona-massachusetts-steak
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'770 bytes
First seen:	2025-05-07 17:27:03 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:QvZi4w8D0kq7izSj8vTkxWiOSOMvxfyzJ:AZiLfTQJ
TLSH	T1AF31FA987CA19F279601DF86F3324225B603DE8B80D00E5DA5AA107DDCBC918357AE1B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

79

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=681ba16291991ead82b5e76blinux22vpnfull_triage

Tags:

trojan hype sage

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/681b97fe0b64e174c41c55e7/reports/6f830de7-e9d7-45c2-a708-d9a5d8bfad62/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e/

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-07 18:05:31 UTC

File Type:

Text (Shell)

AV detection:

13 of 36 (36.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ioc2676zx3mhx4vvsxj5efwudhlnmszmqck2ywbrqug6gvw5hm7a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250507-wpdrxavsaw/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4385af7fd9bed87bf2b595d3d216d419d6d64b2c8095ac5831850de356dd3b3e