MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b40f5fd7420943d31ac58180dcdc9d8eb8d49f973be3e5791120b0189eb5e8bf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b40f5fd7420943d31ac58180dcdc9d8eb8d49f973be3e5791120b0189eb5e8bf
SHA3-384 hash:	e3742429e1d877204ceff6eff7d9575cd18840ff8f02a658c5d1c1806eb2482b9ab2c431f8f23f530075d75d72fbbed9
SHA1 hash:	662efad65e25720bf7a845b737fd6b60834accfe
MD5 hash:	4b7f5c93712521b19b1e572dbd7b2524
humanhash:	uranus-sodium-cardinal-uncle
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	897 bytes
First seen:	2025-04-20 14:53:46 UTC
Last seen:	2025-04-21 14:35:08 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:eiV+mxCWE+QNI9kxwA+5ySKxWH+exRI4qKA+Svq+UPC+2oeV+DJe+vx7+cA+xy9T:h7mNIqYKxS1x6wsZa8v
TLSH	T15E1188CD101429D9851FCDC3339E0E12578687E0E4AEAB35769619339CCA600F858FCB
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

70

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30762.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.30755.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68050a98280f5f89a0d2697elinux22vpnfull_triage

Tags:

mirai ddos

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68050a9490767142c3dc80be/reports/86919504-f6a1-4501-b870-1af45758e05f/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b40f5fd7420943d31ac58180dcdc9d8eb8d49f973be3e5791120b0189eb5e8bf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b40f5fd7420943d31ac58180dcdc9d8eb8d49f973be3e5791120b0189eb5e8bf/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-20 14:54:14 UTC

File Type:

Text (Shell)

AV detection:

18 of 38 (47.37%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wqhv7v2cbfb5ggwfqganzxe5r24njh4xhpr6k6irecybrhvv5c7q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250420-r9xnas1q15/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b40f5fd7420943d31ac58180dcdc9d8eb8d49f973be3e5791120b0189eb5e8bf