MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732
SHA3-384 hash:	986ce0021c56368c6a8f0aa85e6e012fd25f0c3a14a916dbc2f95ee9690afa1f90098f341e803fdf19265429cef95543
SHA1 hash:	41d208d4e4561ecb69dd23fddfa51693e6d60966
MD5 hash:	e50c2b13f7859b03d2fa5eb60601675e
humanhash:	wolfram-network-winter-kilo
File name:	sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	283 bytes
First seen:	2024-12-22 14:20:51 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:/VJq4P/rVYQ3iw3F5kJVKE6LsVKE6NiVVNDV2uVf6vC5:/VJZjDSg5sguThb
TLSH	T1ACD0C22EC40380BF6040489AAEBDB998BA4F2399138E02086E7D42539CA4C98705463A
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

108

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2243.13503.10434.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6769006775bf3268d2fdccd6linux22vpnfull_triage

Tags:

phishing mirai

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/676820547bbc7aaa4c96d8ea/reports/e1bfcf1d-28a9-49eb-9610-714b6e492267/overview

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732/

ReversingLabs TitaniumCloud Linux.Downloader.MiraiB

Threat name:

Linux.Downloader.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-22 15:04:49 UTC

File Type:

Text (Shell)

AV detection:

14 of 23 (60.87%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=it2ipoep742deg6l4shccij6dxukf46ilutim63sxjvwigc3y4za._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/44f487b88fff34321bcbe48e21213e1de8a2f3c85d26867b72ba6b64185bc732