MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b
SHA3-384 hash:	45f79eda47da698937abfbc7f5de18a503a4097030cfa4f0638a2fae68df1271ebf7aad72a9a5949152addaa68fa7204
SHA1 hash:	371293ac25141f6ce8c7faf7706ff5e17bbb04f2
MD5 hash:	fc9c0e00ea0ec504959dd0b2ac9f86f9
humanhash:	blue-rugby-mike-montana
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	907 bytes
First seen:	2025-10-19 06:36:31 UTC
Last seen:	2025-10-20 06:05:36 UTC
File type:	sh
MIME type:	text/plain
ssdeep	24:35V5CYEe5rNI785LKM5K+H53jF5ZTd5elA5Xtp5YA5RL5fR:3HgYLs8BhZHxJfd1t6Arj
TLSH	T14D11EFFF6A6161634640CD656065D8B8D0269DC431400F6E5C8D0CB2E5D7F34B7B7E6D
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

52

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.32160.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive

Link:

https://www.filescan.io/uploads/68f4872f3a79800405eaa7cd/reports/b65fea89-1dba-434a-8b64-1f75877f0cfd/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/8276fe79-703f-47fb-ac22-7394b0d4aa93

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-19 06:37:39 UTC

File Type:

Text (Shell)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nju27k6my7462rrd7tx7vdq2uuokdudgzkhsdzk7wqwqkkwnhwfq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251019-hdsvssep4t/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6a69afabccc7f9ed4623fceffa8e1aa51ca1d066ca8f21e55fb42d052acd3d8b