MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7
SHA3-384 hash:	21a62766ac3783203d5ebf068513e25df196d55773ff688a1f20b0e48913b569dd713c98b2c3bbe458171e8e521c2404
SHA1 hash:	cbb97ef256086cb65001a804b66bc943e6ea039c
MD5 hash:	8b74c89384927585c9f2e45add24dfb4
humanhash:	ohio-cat-don-dakota
File name:	chomp
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	154 bytes
First seen:	2025-02-04 02:11:43 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:LxAjiLdgoKbm8BzSHEomxQERUmOezgxAjiLdgoKb8QFGBzSHEo8QFLRIWLmA:LhH8kE1FzghhQFGkErQFmWaA
TLSH	T1CDC04CC9A0263B588898BD3075712499B452C9C7F3730BEFAD459432CC9E635FF34A88
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

106

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67a1b7bc51193558eb195346linux22vpnfull_triage

Tags:

mirai agent hype sage

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67a1777932695d900162ad34/reports/6f42a8b4-283e-4744-8255-d04798375b0e/overview

Hybrid Analysis SH/Mirai.C.gen

Verdict:

Suspicious

Labled as:

SH/Mirai.C.gen

Link:

https://www.hybrid-analysis.com/sample/5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lnkzteis56b5vb4qxdd3muevha36z2oinb7pgk236cftjdk7f3dq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250204-hgdv2szphk/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5b55999112ef83da8790b8c7b650953837ece9c8687ef32b5bf08b348d5f2ec7