MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d
SHA3-384 hash:	b63b3ca6c0697ca85c3d8d2ad808e3ab7b7456cba5ce44b259682aaf4f4fe601c2c1c352f5d3e9536ff4577b0288e1cd
SHA1 hash:	f20a570fc4c6ed8d39a8781d74170a2398691897
MD5 hash:	af9d378a936b4b33606763cca9b2e59d
humanhash:	louisiana-mobile-hot-potato
File name:	f
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	831 bytes
First seen:	2026-01-01 00:57:31 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:/9ZOek933v6hLk933v6nRk933v6M5dM5nk933v6rOOk933v6rFk933vXw:FZTk92k9Wk9vI9k9ok9+k9Pw
TLSH	T1B401C0CF10445E3175C845D93AD3542E585046E316E4461DAEDE857358C56187B9CE6C
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive mirai

Link:

https://www.filescan.io/uploads/69561aca2fb7bb52ca83e921/reports/b31091c9-a95e-4543-be84-69066c3c4fef/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-31T23:21:00Z UTC

Last seen:

2026-01-01T05:50:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/cf9a83c5-1ed5-4db6-a676-8d89ebcd1bf8

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-01 01:10:52 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rxb3iqzbuixwqunryq6kjgsn4rkrngvnnta642kpvyeszyxahfgq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260106-n5ep5sg19g/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8dc3b44321a22f6851b1c43ca49a4de455169aad6cc1ee694fae092ce2e0394d