MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e
SHA3-384 hash:	61232a535cb5ce2e2b3b315095d11045a96c25511840a58264fcfef0f24130cca4957b3db2710d77e3cfe4eed89793cf
SHA1 hash:	529934df793b31d6521bda4392694e7a8654a05f
MD5 hash:	d7a05a5d89819f10174976c3228c73f2
humanhash:	comet-two-social-summer
File name:	tp
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	271 bytes
First seen:	2025-08-13 16:24:41 UTC
Last seen:	2025-08-14 01:30:23 UTC
File type:	sh
MIME type:	text/plain
ssdeep	6:LdUQN/s6IdUQN/idwdUQN/uNNIFZdUQN/Sa0LKifn:X/sl/iw/6NIj/H0LKon
TLSH	T1C7D012AE745721D345A5DEB0B67294C0F026E5C0E07B5B8DE5C5887581D8921B054B74
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis TrojanDownloader/Linux.Mirai

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Mirai

Link:

https://www.hybrid-analysis.com/sample/6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-13 16:08:58 UTC

File Type:

Text (Shell)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nmodcusaggv6k7mkk3hyoqptx5bh2o767znhhyo32uevlmjzmjxa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6b1c31524031abe57d8a56cf8741f3bf427d3bfefe5a73e1dbd50955b139626e