MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c
SHA3-384 hash:	a4498f7e4a59ae6a85c8b7540e1808964f7cfc1db66a30ce60cad3da8d72f3eeafc0b3bbd51e34e4b51e20b3790a3676
SHA1 hash:	14d81f7cd3c78ab3d15ed06823319fdbe2434e3b
MD5 hash:	3498b3d8022179a6c872d2228120411f
humanhash:	mockingbird-red-maine-colorado
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'944 bytes
First seen:	2025-12-01 16:44:20 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:z5EMy0MBDCeJ8jE6P1iI3SKXRCyCeyJ3G3oiLi6UgHgugHgivBcBSKXV6/K5m58z:z56VCeaODkCNKNHSH9Pou8GPi
TLSH	T12B4197EAA8A16F735D81EF0870230F1D600FA5C656910BADDF6E2C39FEBC90E7014645
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

36

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-01T21:04:00Z UTC

Last seen:

2025-12-01T21:43:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/db5cce9e-c004-45a5-a127-ac225ab47fd2

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-01 17:11:03 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vhvewdthgbuktsbcfw2r3ymdwvx4d3iqqofa3vxvgdh74abxyuwa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.75

Link:

https://yomi.yoroi.company/submissions/a9ea4b0e673068a9c8222db51de183b56fc1ed10838a0dd6f530cffe0037c52c