MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92630c0119838b399f2f740a62533e13a25fdf46b7a1afdb5daa71364c1638fa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 92630c0119838b399f2f740a62533e13a25fdf46b7a1afdb5daa71364c1638fa
SHA3-384 hash: 4164157403f2cb660f825f53260abd90ada3e56d0571d1c22179471545138e497ca649a00db27d8c300fa3aceecca312
SHA1 hash: 93e7080c39a6b765116387ac5fed79de5d5f4589
MD5 hash: 29847ad0676b490979d15db7fec31ddb
humanhash: steak-spring-apart-cola
File name:irz
Download: download sample
Signature Mirai
File size:2'792 bytes
First seen:2025-08-22 21:38:33 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 48:cUl/bAJtgosClQlRlKAkdgggY4G+Sq/ViyP:cUhLClQlRlKIG+SulP
TLSH T16451B3EFF36317A6494C5E07F1B6497C7062C2C91096CB89F94C2CB9B199A28B014B66
Magika shell
Reporter abuse_ch
Tags:mirai sh
URLMalware sample (SHA256 hash)SignatureTags
http://45.125.66.56/arm1c6ad7da3701f41af453d1701d5656e256a6dcf08023270b2926685b82a19d07 Miraiddos DEU elf geofenced mirai
http://45.125.66.56/arm5ff2d4387cb624cfb0eb01dfe59d09c8acc09eec41873016cc1590b6cffdd10c7 Miraiddos DEU elf geofenced mirai
http://45.125.66.56/arm65e29e6ac19c524f249a4e5800d6458735f5d131a6d9d59ea37dc716f7215dc31 Miraiddos DEU elf geofenced mirai
http://45.125.66.56/arm7b772d55640399dee9b277a0ffd7ef8f65bb87363dbfdd0634cb88328528f369d Mirai404 censys DEU elf geofenced mirai ua-wget
http://45.125.66.56/mips6d8b92be20e13565fd61d105c44acadca0a7dac38eca5bc5693c5867b84fe62f Miraiddos DEU elf geofenced mirai
http://45.125.66.56/mpsl3c2e72b972e03e620def95ca99d0af072db842dd0d016891fc30527770190a92 Miraiddos DEU elf geofenced mirai
http://45.125.66.56/spc39fae3e0e9e2ba27ffa0eb62a244b16552abc21083dfceeb66dfc080c316696c MiraiDEU elf geofenced mirai ua-wget
http://45.125.66.56/sh4ac4a61edcb0c971f8f6b4b13f51e4105b4c838a344022091f1dcf351240a80b5 MiraiDEU elf geofenced mirai ua-wget
http://45.125.66.56/ppcfd07238570884beaa7f26c644408b18524fd2cc7c3b765ec24a0e9a36069d45a MiraiDEU elf geofenced mirai ua-wget
http://45.125.66.56/x86_64c39196e5ab865850c997492cc40ea9e9533ce1bcf915b255647f4ad82418be25 MiraiDEU elf geofenced mirai ua-wget
http://45.125.66.56/x86b137e7049facd81bf0e15a0bb6b0135732a43e126b799e903798f05ef87ca98e Miraiddos DEU elf gafgyt geofenced mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
22
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Malicious
File Type:
text
First seen:
2025-08-23T00:05:00Z UTC
Last seen:
2025-08-23T00:05:00Z UTC
Hits:
~10
Threat name:
Script-Shell.Worm.Mirai
Status:
Malicious
First seen:
2025-08-22 22:10:59 UTC
File Type:
Text (Shell)
AV detection:
16 of 24 (66.67%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

sh 92630c0119838b399f2f740a62533e13a25fdf46b7a1afdb5daa71364c1638fa

(this sample)

  
Delivery method
Distributed via web download

Comments