MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675
SHA3-384 hash:	ec23ce350d21e9733d2c6285cf0c23516f66a8937742f6208f6bbdc1caa91336136b82d9f4eb7a9a3b32b5b8cb706b3e
SHA1 hash:	4d2420748d65501ff9590e4274aa17fe43568409
MD5 hash:	4f8408ef6a7f58506d6997361fa4bd5e
humanhash:	carolina-magnesium-edward-carpet
File name:	fx
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'506 bytes
First seen:	2024-12-26 19:11:14 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:ExcmxxIK1oo6soe3goSsoe36Pe3efyoe3ed5Qe38ATz8Wve3NU/e3Y:ExtxIut6m1Sm60efy7ed58u8WU+EY
TLSH	T1A13158232B8C34F4F3C9950AB2A7DBE62AD9C0DF2D430715E57883EA7C956241E75A70
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

103

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=676e46268a4d48ee35ffe69dlinux22vpnfull_triage

Tags:

tsunami mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug evasive

Link:

https://www.filescan.io/uploads/676daa82d986a2005f8cd3e7/reports/7a8c0a21-9aa6-4cf9-945f-3740aefe76ea/overview

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675/

ReversingLabs TitaniumCloud Text.Browser.Tsunami

Threat name:

Text.Browser.Tsunami

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-26 20:01:09 UTC

File Type:

Text

AV detection:

5 of 23 (21.74%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=tobekypzfr73nq4mcb7vbea4ptpleaq34n7xpjbyhogw4wz22z2q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/9b824561f92c7fb6c38c107f50901c7cdeb2021be37f77a4383b8d6e5b3ad675