MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af
SHA3-384 hash:	aac6fcf0887a50ac6f87804667464654c3afdd5b1c829a24d6663418e40fb6c3425d9e79ca3a756d27b187dcfad80d47
SHA1 hash:	87049ec4d7e9fbcb32fb18b839c58428c9c892ef
MD5 hash:	6c21086b3ce157d1265f2256ebcac73d
humanhash:	oregon-cola-uranus-crazy
File name:	abc1.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	696 bytes
First seen:	2026-02-25 19:46:01 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3NLqQHjQbNIl5zAQI0LKjQvOsQjCQN/QuSEQntaKAQhiAQrfAn:3J3NLBuNI7nKq4rtYtBReA
TLSH	T104011E8D2BE5B1879A2C8E18F26B825C794086C870700D55F23AB87568ED2107CE4FB6
Magika	batch
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

64

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/bf5f6031-e139-4477-954c-a34c7a254339

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-25 19:46:19 UTC

File Type:

Text (Shell)

AV detection:

7 of 36 (19.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lfffu7fhmj2sf4c5xxn277bita5d32lgg54plww3k75uk4vsocxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260225-yg4z8scx8c/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af