MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8d29e7e8fc06f9b54bf35c50d8c8f227bc75aaea18098b2c49cbe2bde47199ea. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 8d29e7e8fc06f9b54bf35c50d8c8f227bc75aaea18098b2c49cbe2bde47199ea
SHA3-384 hash: b7fe219b4b849a3770bc62666c2d91dbf63a5a0e0cb8aa05da7f35df6cd7d76fd381e1ec353e7c85cbf7cb46066571f5
SHA1 hash: 868b14e86260813b63401460ce833c0b08772580
MD5 hash: 7a3755828cb585b015078a21083fdac7
humanhash: butter-kilo-enemy-eight
File name:HMugenXrevamped.sh
Download: download sample
Signature Mirai
File size:2'520 bytes
First seen:2026-07-11 16:53:26 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 24:vh4ihdKhKLD2hNyhTUw2h7uhdsenhUFIhDADhrshyhpuRhNGhmChAnAMkhdDB:v5OLGSh439hoXa+D6AMk1
TLSH T15551C0CA125217753DF6FABE71BA4468B390E0CE68C5EE34E5D938F5424DD0C3286663
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://45.90.163.37/GoonGang/XDx86a69d189f06bc78e50496b7247deb5cb41569aec1c949481c2ac55a202cb1c947 Miraielf mirai ua-wget x86
http://45.90.163.37/GoonGang/XDmips3eb84b562b448b6833cb2636ad8ad32370b4ed45839349d7845ff71f6dd874e7 Miraielf mips mirai ua-wget
http://45.90.163.37/GoonGang/XDarcdbffb6c37db2d069f5a3920f4c2eac4d2bf04321ec5920d7fa9adcf037f95fb8 Miraielf ua-wget
http://45.90.163.37/GoonGang/XDi468n/an/aelf ua-wget
http://45.90.163.37/GoonGang/XDi686cf8e07fc5dc89f86e39373e9b5c593f91b8ec737c635390b65a8182d1b883a85 Miraielf ua-wget
http://45.90.163.37/GoonGang/XDx86_64599e66112d62a73a65adf7eac19254639a532131a08489ceb20132c30767ebd8 Miraielf ua-wget
http://45.90.163.37/GoonGang/XDmpsl475bb3556cb1168275bb79d42656d15644a28f9620de4a22a261b23396990dc9 Miraielf mips mirai ua-wget
http://45.90.163.37/GoonGang/XDarmb17eafa26e49131f35a803e31884d20990edd70f57e198434988627b7360267d Miraiarm elf mirai ua-wget
http://45.90.163.37/GoonGang/XDarm54e984e6d85e918310954b0607ed63354c2385dcfe736c06bb8b4e80bf5b31a9b Miraiarm elf mirai ua-wget
http://45.90.163.37/GoonGang/XDarm683d866a2c3640eb8edebd26b2258c52c0fc55eb583235c5756dbb75413d9155b Miraiarm elf mirai ua-wget
http://45.90.163.37/GoonGang/XDarm756182524f8086b409cfb3f149690218e5b4c94d3e7fadd95062cd7fd2c125b1f Miraiarm elf mirai ua-wget
http://45.90.163.37/GoonGang/XDppc4d352b855142d1a6e3d805ae3f82b16669953b1e8e50e84d96a14265554c508d Miraielf mirai PowerPC ua-wget
http://45.90.163.37/GoonGang/XDspc832011524c7c5ee7eed800a1d375fe63abad997d83d146a12d77fc837674a475 Miraielf mirai sparc ua-wget
http://45.90.163.37/GoonGang/XDm68k99863fca0df6156e734ca682fc7d4b7e518013908210247d5f8530049854aa6d Miraielf m68k mirai ua-wget
http://45.90.163.37/GoonGang/XDsh4e75e182b99efc06504b2ed60b6c8c0d72d30c9a3c13a8223888e0fde0215c1ec Miraielf mirai SuperH ua-wget

Intelligence


File Origin
# of uploads :
1
# of downloads :
68
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
File Type:
unix shell
First seen:
2026-07-11T14:00:00Z UTC
Last seen:
2026-07-13T01:45:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Downloader.Shell.Agent.p HEUR:Trojan-Downloader.Shell.Agent.gen HEUR:Trojan-Downloader.Shell.Agent.a
Status:
terminated
Behavior Graph:
%3 guuid=882c5407-1b00-0000-8ede-09b69e0a0000 pid=2718 /usr/bin/sudo guuid=83f5fb09-1b00-0000-8ede-09b6a40a0000 pid=2724 /tmp/sample.bin guuid=882c5407-1b00-0000-8ede-09b69e0a0000 pid=2718->guuid=83f5fb09-1b00-0000-8ede-09b6a40a0000 pid=2724 execve
Verdict:
Malicious
Threat:
Trojan-Downloader.Shell.Agent
Threat name:
Linux.Downloader.Morila
Status:
Malicious
First seen:
2026-07-11 16:55:49 UTC
File Type:
Text (Shell)
AV detection:
16 of 24 (66.67%)
Threat level:
  3/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

sh 8d29e7e8fc06f9b54bf35c50d8c8f227bc75aaea18098b2c49cbe2bde47199ea

(this sample)

  
Delivery method
Distributed via web download

Comments