MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52
SHA3-384 hash:	aa5a289a88844c6970628ba3be15ff00bed20542c09af44c4fec4a64345b137e41b4c824183677f940bcbab4e4676702
SHA1 hash:	d5e04986b34449456a5edacc055acc17f6a7dba7
MD5 hash:	99fed81875aeff728ce83c51485fd087
humanhash:	nebraska-alabama-nineteen-texas
File name:	fttt.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	492 bytes
First seen:	2025-12-06 16:31:03 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:h9OnFflE0FJBodAjJdyzNdyuGjJ60hMwXJfLFNfZ5B/pEa5YYIPadyivpps:d0FJydAjJdyzNdyuGjJ73JDhZMuvs
TLSH	T106F0B4EDF4734073B80DAF1BE174834DE152F69965E42A6088D77C09A82DC153492637
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/69345a76ff25e40750d5c4da/reports/a00e32d2-68d1-4636-9df1-e74b4329a9e3/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-06T14:54:00Z UTC

Last seen:

2025-12-07T01:41:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52/

ReversingLabs TitaniumCloud Script-Shell.Trojan.MiraiB

Threat name:

Script-Shell.Trojan.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-06 16:13:15 UTC

File Type:

Text (Shell)

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=p53asti44quqwvtd6nglvh2r74srcngelj53hsurui4usxs7zvja._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/251206-t111gabp9v/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

File and Directory Permissions Modification

Executes dropped EXE

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/7f76094d1ce4/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.28

Link:

https://yomi.yoroi.company/submissions/7f76094d1ce4290b5663f34cba9f51ff251134c45a7bb3ca91a239495e5fcd52