MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608
SHA3-384 hash:	de65fe7a145b56475b3c1157573569234d49f1e1287ef09139ebd2c0a648088860ed64495df102d514ad45fb0255544b
SHA1 hash:	6059b27d51c355b7cf2345a0678353f304cbe589
MD5 hash:	5deef66bbbdf5d6cd6ac5f207251b7c3
humanhash:	king-double-asparagus-lima
File name:	zyxel.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	896 bytes
First seen:	2025-10-24 23:18:35 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:6RaxqCR4RHCRhNIjlTBACRqiKl2ECr1CT9qCKFG10qCp6ZCidKACJCb7IACPjAUn:Qaxt4ihNIphHKlXju62Xxn
TLSH	T18A111CFA1166232903444D05B06E890864A79FD2B170DE5C988CA4B37BC6D31F173F5A
Magika	csv
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

47

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

text

Link:

https://opentip.kaspersky.com/759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/4d16cf11-5002-4f0f-8bc5-7a30d5467eb1

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Alevaul

Threat name:

Document-HTML.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-19 13:25:16 UTC

File Type:

Text (Shell)

AV detection:

15 of 36 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=owlcpvdmyk4xk4ebkx466bjpvvjr5nywo7udesrkt5pfzb4hyyea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251024-3a3k2swqgp/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/759627d46cc2b975708155f9ef052fad531eb71677e8324a2a9f5e5c8787c608