MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53
SHA3-384 hash:	594897f8ba2530b5c38da2ed6c92502bda0fc865824ac68d5d695b8469a235d2a06f6ddffbba47f98e23981e83676282
SHA1 hash:	c6f9e66646c8b45821f623edd0c67a2a6fba2fab
MD5 hash:	ffa560bb93c5a1c2004ba98ddab59445
humanhash:	earth-high-burger-yankee
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'065 bytes
First seen:	2025-10-10 18:20:23 UTC
Last seen:	2025-10-11 18:15:31 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:Ew9wQw6NIxwPKpwMLwCwywkSwMswEYwcLwNdv:/a7qj+t
TLSH	T1931103D92260515550086B30349B093A9FDFF3CAA0366AF4547ED827A0CF980BB28F3F
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/68e94e9371883144ef30d3ff/reports/0c1ef9a9-d229-42a7-9841-c86e08d8955b/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2025-09-19T10:34:00Z UTC

Last seen:

2025-10-10T15:49:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/00fc5708-3ae4-4012-807a-ed2fab03747c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53/

Neiki Document-HTML.Downloader.Heuristic

Verdict:

Malicious

Threat:

Document-HTML.Downloader.Heuristic

Link:

https://tip.neiki.dev/file/50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-19 15:56:20 UTC

File Type:

Text (Shell)

AV detection:

16 of 36 (44.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kcupmcq3pnrtbhtxdlrxptksuvsdkptpfhkxxgz6ulkfp75u7njq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251010-wy8nmstvds/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/50a8f60a1b7b63309e771ae377cd52a564353e6f29d57b9b3ea2d457ffb4fb53