MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701
SHA3-384 hash:	db9f48a81e52079c89572a2843bb5f752e66e6517f4f2a33f28bf49ac329fb5f1c3817cef39ee5a67b36886c909997e1
SHA1 hash:	2cddb0b18d2e3ac360a1f8e30e4c30f7c4f9b220
MD5 hash:	067a1562136f354c5f76f0156d1b9065
humanhash:	angel-delaware-muppet-grey
File name:	adi
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	198 bytes
First seen:	2025-12-05 18:21:54 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:LA5/jeAKTj7KDA5/ZWJeAbJTobJ+0TPATVWJv:sh6AMnthoMAewUh
TLSH	T18DD0C9B84106A5B47407B9ED717613CA31E3CB0F30768A1ACC4020B3E1C045CE022E0C
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

21

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/693325496019bc7a8f818e50/reports/2e71b6d1-ca22-4ca2-a293-738bf44694ef/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-05T16:46:00Z UTC

Last seen:

2025-12-06T03:09:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/2843050d-c8d5-4d68-9a8d-3456125c363e

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=watyfyawjx3vzx3ptysncb6jesyiwj7h7ayxrx5fboqaxaswq4aq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251205-w6wztatqaq/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b02782e0164df75cdf6f9e24d107c924b08b27e7f83178dfa50ba00b82568701