MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3
SHA3-384 hash:	c0e797d57e779d40a9b2365758dd5aa8e395e9a122f257228b61546ec5e4fffe19c8a79d3844ad21eed4206154907b46
SHA1 hash:	cf38eb896e0b99d950026d6e6d131609cd05c646
MD5 hash:	e74aa47aabbac6340cd8f8eac82372bc
humanhash:	charlie-lake-social-sixteen
File name:	and
Download:	download sample
File size:	3'504 bytes
First seen:	2025-04-19 00:33:31 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:N0XfR1AiZpxiQhFPNg41aIK4K6pw7nuOh7/TBHN:61AiJ9F244Iml
TLSH	T1637108CB23636A1D0A8F84D07591870A35217EE2F0993B58E41813726B47A9DB5D4FEC
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

104

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680385572203b3e10cd199d0linux22vpnfull_triage

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/6802ef8d90767142c3db5d79/reports/3de62a4c-4e90-4bfe-975f-90a7d4ac24e1/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3/

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-19 11:13:25 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=uxwfnw3w2z7d7hmalfws24xu66f2mhm5pfkwmk7bstoib7njm7jq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/a5ec56db76d67e3f9d80596d2d72f4f78ba61d9d7955662be194dc80fda967d3