MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648
SHA3-384 hash:	de2e4c171aae0500ccb2a29229f5404ce907da30d23b87cd31b455d3793efb3481063c2cfb3209eb4f537613b9af28a8
SHA1 hash:	b2c0b79fcca5cdb88b0acecdd8793299c728595c
MD5 hash:	9b3bd44e998d09776d7330783d2012d0
humanhash:	london-michigan-king-cold
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	4'868 bytes
First seen:	2025-09-01 15:28:39 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:cUllyAk0aFqPDCbSAMThdhABJ94vv10747/eT4XHX:cUa4CbSAMZn1074rjHX
TLSH	T180A1B8DFB5626F96498CCF0BB1B1549C7011CEC720C68B95FD9D2CB9F2AC908B015A67
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

35

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-01T13:43:00Z UTC

Last seen:

2025-09-01T13:43:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/12c04347-45c6-47f2-8868-564989a9c049

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-01 16:10:10 UTC

File Type:

Text (Shell)

AV detection:

16 of 24 (66.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wgpc22cubstorvzsyglifvpkqzar6cipbkx4urnzovtu37t7azea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250901-tttb2sttbw/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b19e2d68540ca6e8d732c19682d5ea86411f090f0aafca45b975674dfe7f0648