MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9
SHA3-384 hash:	f74df3d30f007e144e3e27bfd48a6d2572f584a12ea5482d16b7bb6a7dea78ab9f82470f93e052ecb2d9127a5a6022ca
SHA1 hash:	805a2d8d8d1098a4e9aab8eb6781779ee5336ed7
MD5 hash:	eba54b8635ec2e25c296a33f9b6bcb37
humanhash:	diet-november-eleven-mobile
File name:	curl.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	694 bytes
First seen:	2026-02-16 12:00:00 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:bCj8dz0j8dzibGjZdzZljZdzZadJjRbdznjRbdzqjgHbdzyjgHbdz6hFGjUdzvgJ:b28dzY8dzibSZdzZxZdzZadt1dzj1dzH
TLSH	T111015E9A2096AFF3219ADF04FA6677DD601A6EFC30400FA4D05F3C9A6F58241B905700
Magika	batch
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

base64 busybox mirai obfuscated

Link:

https://www.filescan.io/uploads/699306e1930564ff3ca37fa4/reports/04dcae61-e549-49dd-a21c-3e6f4a508979/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Detections:

HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/dd22192f-69d3-49e7-b16c-8729b6d64975

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-16 12:00:43 UTC

File Type:

Text (Shell)

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l734r7jioum6v2bxanfqe5rikqdmgdfsyd773bf2jnti6vpl4deq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260216-n6k9badt9d/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5ff7c8fd287519eae837034b0276285406c30cb2c0fffd84ba4b668f55ebe0c9