MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8
SHA3-384 hash:	d058f5ae030d9b3427ef7baee2b9e561f7d610d7f917aa6e0ecb3a5ded427585979205c099ee4103834b425f27a9d41b
SHA1 hash:	9a1dc9668f9c8c1acd2a3d1573f8d39cc98cd155
MD5 hash:	d294799119319440d7aecd9126dcbd27
humanhash:	connecticut-thirteen-high-oklahoma
File name:	chomp
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	158 bytes
First seen:	2025-03-07 00:31:42 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:LxAjZTLTeUWRLQhIm8BzSHEomxQERUkXUKVxAjZTLTeUWRLQhI8QFGBzSHEo8QF8:L+fWR28kE1FUg+fWRsQFGkErQFmWsJ
TLSH	T12AC04CC92062774484E8ED2030B2E5DB7451C583A2765F5FEC88A836D9C9530F734BC8
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

148

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

95.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67ca8accc668b65489bfa32clinux22vpnfull_triage

Tags:

mirai agent hype sage

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

bash lolbin

Link:

https://www.filescan.io/uploads/67ca3e8ff8726576332df4d5/reports/db92bfe0-822b-4e0a-b04e-f20b1e84a2b0/overview

Hybrid Analysis SH/Mirai.C.gen

Verdict:

Suspicious

Labled as:

SH/Mirai.C.gen

Link:

https://www.hybrid-analysis.com/sample/6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8/

ReversingLabs TitaniumCloud Text.Browser.Generic

Threat name:

Text.Browser.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-03-07 05:49:23 UTC

File Type:

Text (Shell)

AV detection:

2 of 38 (5.26%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nm7bdphaloo7fjk37t7gtuhooum6cvjza576ovxpjjdviassrxea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250307-gh63jsvvhx/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/6b3e11bce05b9df2a55bfcfe69d0ee7519e15539077fe756ef4a475402528dc8