MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90
SHA3-384 hash:	3e90b1f0a3b0a05131b6c79c1871befe642407bfaa26e6f60fcb6aa79ae52a189e8eaa564de9f194799c7a468b4b3d0c
SHA1 hash:	95956ca5b92d4e99daf9ddc87598f9e9a8d02d12
MD5 hash:	4d1a4ef71ed2ce8173dbe935302acdbb
humanhash:	bulldog-harry-purple-double
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'669 bytes
First seen:	2025-04-25 12:22:53 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:QvZi4w8avtULEy8CvsUqHyfC2lul21l8lnGlbTlh:AZix6s6SccqbBh
TLSH	T10F3173A57C61AF776AC2EE44F1F3C146A0C3FAC254544E19A6F9687AE8FC9083421A17
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

97.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680bafe2a37ff28e1299bf58linux22vpnfull_triage

Tags:

trojan mirai agent virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/680b7eb2218c4a98ade1d7f5/reports/b6de106a-d843-484b-beaa-5d4b7f5f25fa/overview

Hybrid Analysis Trojan.Agent

Verdict:

Malicious

Labled as:

Trojan.Agent

Link:

https://www.hybrid-analysis.com/sample/6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-25 15:18:12 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=m2dncovofgvd2z53vz5qakdtbdlqfgfl2bjnqcdikcunx3kzlkia._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250425-s52bcsymt9/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/6686d13aae29aa3d67bbae7b00287308d70298abd052d8086850a8dbed595a90