MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 53481078d0091b99c1102b01149e3034c190995ebea21fc26f8899c7fcd2452d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	53481078d0091b99c1102b01149e3034c190995ebea21fc26f8899c7fcd2452d
SHA3-384 hash:	2a09c65094f8f0fd5f877d82244f5a042abcf8111dc6d0a2a509fe847d099951bddababa35e15231c20eb615c61890be
SHA1 hash:	985aa8f686b0fa7ad4bcce225044722e3e2516a4
MD5 hash:	752753133c56ecaf27339242cce1b37e
humanhash:	cola-lake-grey-zulu
File name:	f
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'106 bytes
First seen:	2026-04-15 21:31:46 UTC
Last seen:	2026-04-16 05:07:16 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	48:mDf7DIH7Dr7DW7D57DO7DJ7Di7De7Dh7DzGDfGDIHGDrGDWGD5GDOGDJGDiGDeG0:mDf7D47Dr7DW7D57DO7DJ7Di7De7Dh7/
TLSH	T13B41205E01493C84C04CD43A3397861EB0A85BDA18AF4B97AEE405BD90F8CCE7935E4A
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

65

# of downloads :

13

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive mirai

Link:

https://www.filescan.io/uploads/69e06fc2799d5bf325018fc6/reports/efe615bf-35c2-45a8-a225-aa161e76da9f/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-04-15T18:45:00Z UTC

Last seen:

2026-04-16T03:36:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/53481078d0091b99c1102b01149e3034c190995ebea21fc26f8899c7fcd2452d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/280722d7-e8ff-4bb7-a668-8430a857048c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/53481078d0091b99c1102b01149e3034c190995ebea21fc26f8899c7fcd2452d

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script-Shell.Trojan.Vigorf

Threat name:

Script-Shell.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-15 22:48:57 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kneba6gqbenztqiqfmarjhrqgtazbgk6x2rb7qtprcm4p7gsiuwq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.