MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5326ebdce9e78b303f5d690a10dee74f5c512f820a1ae6929473b6121760f979. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5326ebdce9e78b303f5d690a10dee74f5c512f820a1ae6929473b6121760f979
SHA3-384 hash:	9dfd58a0d473f5d64badf9350410e7431f707043f099c92d20dc6ffd20580794718db4e80fa8fd3baf35563aa1a0e3f9
SHA1 hash:	bf05aeaaf04ac2bf912b2ba0e0040bd4dd7cd91f
MD5 hash:	d47fe69df2cb214d09f83518bba4e6bb
humanhash:	winter-island-shade-purple
File name:	akhenaton
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'214 bytes
First seen:	2025-07-29 06:42:52 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:l3H3QV3h3KT3s3J03m3jq73px3paVnwyy3pI3pVVUWrz3poa3po3VX0Ci3ng3ntf:l3H3QV3h3KT3s3J03m3jq7373ES3e3bS
TLSH	T1E14198C540A56C1122435D8EFB02490A398150C9752B637E6EBCACB9BC8ADC6F377E76
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

26

Origin country :

DE

Vendor Threat Intelligence

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/aa799785-b7dc-4d17-95ae-5ae40be2072c

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

9%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5326ebdce9e78b303f5d690a10dee74f5c512f820a1ae6929473b6121760f979

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5326ebdce9e78b303f5d690a10dee74f5c512f820a1ae6929473b6121760f979/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Multiverze

Threat name:

Script-Shell.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-29 06:43:51 UTC

File Type:

Text (Shell)

AV detection:

9 of 23 (39.13%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kmtoxxhj46ftap25nefbbxxhj5ofcl4cbinoneuuoo3bef3a7f4q._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:owari antivm botnet defense_evasion discovery linux

Link:

https://tria.ge/reports/250729-hg74wsdp3t/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Changes its process name

Checks CPU configuration

Reads system network configuration

Enumerates active TCP sockets

Enumerates running processes

File and Directory Permissions Modification

Executes dropped EXE

Modifies Watchdog functionality

Mirai

Mirai family

Malware Config

C2 Extraction:

newageofkifirempire.camdvr.org

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/5326ebdce9e7/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.75

Link:

https://yomi.yoroi.company/submissions/5326ebdce9e78b303f5d690a10dee74f5c512f820a1ae6929473b6121760f979