MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6058a65f4fa3fea951ce02a016c63e2fe5eae8c5a645aa3d3f43c1cb9c9d4832. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6058a65f4fa3fea951ce02a016c63e2fe5eae8c5a645aa3d3f43c1cb9c9d4832
SHA3-384 hash:	b231a48ecf137038d4d1c6be2cea539dfe161e33040f4c0d436cafa5fddc14a9b8cc762ca7de00a265daf9fb95865a8e
SHA1 hash:	adcd2c73c28e068a22f5f5fd7dcbfcdbf53f7bf0
MD5 hash:	7b9ded4ec908664dfce7825c60bd35f3
humanhash:	lion-yankee-green-august
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'456 bytes
First seen:	2024-12-26 09:11:51 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:A7vc2A+j3cWAPwjpMxceb9AAFyNI9cAlAKXcYN/yc+KuAyIwpUacW3vARwecEcq6:A3cKUQNIgxKcIwSG36XS7T6ThQGTK
TLSH	T1933122C60366DC2A02FFCF8A3522484CF054C9E768AFD7DC984D8D7AB661614F4B6D58
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

74

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=676d1df475bf3268d2fe92calinux22vpnfull_triage

Tags:

malware

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug lolbin remote

Link:

https://www.filescan.io/uploads/676d1defb227d2dfb410586d/reports/7eee39c2-7878-4de7-b0d4-496d1fd27205/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

7%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/6058a65f4fa3fea951ce02a016c63e2fe5eae8c5a645aa3d3f43c1cb9c9d4832

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6058a65f4fa3fea951ce02a016c63e2fe5eae8c5a645aa3d3f43c1cb9c9d4832/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2024-12-26 09:12:12 UTC

File Type:

Text (Shell)

AV detection:

13 of 23 (56.52%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mbmkmx2pup7ksuooakqbnrr6f7s6v2gfuzc2upj7ipa4xhe5jaza._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/241226-k56xva1qbt/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6058a65f4fa3fea951ce02a016c63e2fe5eae8c5a645aa3d3f43c1cb9c9d4832