MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f
SHA3-384 hash:	26dd51819f10e71f29547dbabd24b13c44094d782cf6454474299643206dccdef56d9e92e92179d55b610895fd2a0ccc
SHA1 hash:	dbb27ddb5dca8aead2e72e887c24cfce68947a22
MD5 hash:	92d13edccd8d4b5832ee62c441c24785
humanhash:	echo-crazy-carbon-nitrogen
File name:	l
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	610 bytes
First seen:	2024-12-28 15:05:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:VaJhAFhHPrWKIw+u5ZMoOF7+MB0WVhbEO:Ioh6Rk5zOt+MB0QbF
TLSH	T172F04CCD81A29C7B18A24DEFF1229915A5CAD0865E910EC039CD203BE7DCE487192EF5
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

102

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.2243.7141.23456.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6771050775fb913a14790f63linux22vpnfull_triage

Tags:

downloader mirai virus shell

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/677013dcd986a2005f8db062/reports/d28a06a7-4f1b-494e-905c-0a670928d92b/overview

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-28 16:03:01 UTC

File Type:

Text (Shell)

AV detection:

11 of 23 (47.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rxrteiow2lciiu4e6eyvqpn24uwll2yvoeyr4jwkanlg7rwqoqhq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8de33221d6d2c4845384f131583dbae52cb5eb1571311e26ca03566fc6d0740f