MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366
SHA3-384 hash:	0ea7232aecf78327cd7be5cb9b4b587c8451f23daa9ef334bd126abe6253931f733640fbf7df5d2c172b1183b7b70f3e
SHA1 hash:	40d11c93cff728d8dc1d78854f46088c6dbda213
MD5 hash:	ffbdfa555d598ee72cbdebd6470aff0b
humanhash:	paris-arkansas-ohio-magnesium
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	718 bytes
First seen:	2025-11-15 21:15:48 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3DLi3NNIl5wu0LKJVOY2e6xNMeoSwZtiFvzzvBU:3J3P0NI7KKLFSGHtUO
TLSH	T14C0175AC2AE1237B1624DF1CA067C0C970018DC635B15B19E4EA6FF498D9305BE1427E
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

52

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6918eda70c70fbf813abf9c1/reports/d7d50e97-ea24-4d19-a9a4-dbbafebbe17d/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-15T19:34:00Z UTC

Last seen:

2025-11-16T01:36:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/664df482-2460-4632-bfab-c6a7dc8468b3

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-15 21:16:27 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=uo4mivhti7mexubs6rfg43cxaadg2xerg2wmgxk2mbs5fe23unta._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251115-z4l9daslat/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/a3b8c454f347d84bd032f44a6e6c5700066d5c9136acc35d5a6065d2935ba366