MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795
SHA3-384 hash:	359c299a1deecfa8405a38b3631179ee58fb1921ce05a0807f77266579691fcaf052e3fda01e7bb081dd44b539fe52be
SHA1 hash:	26d6a04fcccf7c49b2e3fac7a6499bc6a027b1ff
MD5 hash:	adce1fd24040e16bb1f4d381b8388cf7
humanhash:	west-green-nebraska-dakota
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'409 bytes
First seen:	2025-12-30 01:00:46 UTC
Last seen:	2025-12-30 03:13:19 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:r05pELMk0aC5EMy0MBIWiRFcG0a0RKY6pqufKXRC8Y8i3/D/coT0ET0RUgHBGgHD:rMpzaC56JjH49KxNVHfHsTGmTPQuLeui
TLSH	T1D241E4EC3AB17B738582CF04F0734ABD701BA9D466904EACA4BE14B9D5BC914B830A16
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

41

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox mirai

Link:

https://www.filescan.io/uploads/6953870c2fb7bb52ca81da34/reports/f5a98248-df51-441f-aeb8-d05380ee8a2b/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-29T23:15:00Z UTC

Last seen:

2025-12-30T21:42:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/00f308ad-87a7-4161-a6ab-21c85052ceee

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-30 01:10:16 UTC

File Type:

Text (Shell)

AV detection:

8 of 36 (22.22%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mte7zlldl3w54u3vtwawirhtx6qenmrzikk43yb2pvg4c42vk6kq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.93

Link:

https://yomi.yoroi.company/submissions/64c9fcad635eedde53759d816444f3bfa046b2394295cde03a7d4dc173555795