MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8901320413776f43a0e6325662ec9ecf41fd420c430aa5b810cc183d6b7164e6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8901320413776f43a0e6325662ec9ecf41fd420c430aa5b810cc183d6b7164e6
SHA3-384 hash:	ed56aab0a3495e95f20ee1a71dcad2bc20a63de7ede2ef633e9a9c2a6729ff7478a20b4325c02554a68405a1bb823c25
SHA1 hash:	7c28d5498dc5c6d2f5c76b999378e5f9e65c5969
MD5 hash:	d48198c9b97b6b78fd71f39e6c9f7e7d
humanhash:	winner-yellow-oranges-idaho
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	765 bytes
First seen:	2025-05-10 11:22:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:6fKNQj+JfK0q+JfKwNIl5zA+JfKBf0LKj+JfKR+Os+JfKkC+JfKja/+JfKjSE+JV:GKNQyK0xKwNI7PKwKyKR+kKk5KjaGKji
TLSH	T1F801ED9D2321568ACA0C9E0870AA4E84975A83C2BD74CF59AC5C88F76CD5E01B06CF7F
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

89

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=681f38264a59e5a2ce038c4dlinux22vpnfull_triage

Tags:

trojan mirai agent virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/681f371ec7418694c8a85fe1/reports/974ece4e-cf71-4363-b3f4-e5ceabdd41a6/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8901320413776f43a0e6325662ec9ecf41fd420c430aa5b810cc183d6b7164e6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8901320413776f43a0e6325662ec9ecf41fd420c430aa5b810cc183d6b7164e6/

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-10 06:22:55 UTC

File Type:

Text (Shell)

AV detection:

18 of 37 (48.65%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=reatebato5xuhihggjlgf3e6z5a72qqmimfkloaqzqmd223rmtta._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250510-ng65gsxtcx/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8901320413776f43a0e6325662ec9ecf41fd420c430aa5b810cc183d6b7164e6