MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b55f41e2772063529f45c0769f0937efd1ec54986731f03bb8b9b752fcbfea1b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b55f41e2772063529f45c0769f0937efd1ec54986731f03bb8b9b752fcbfea1b
SHA3-384 hash:	a0dddb0a95ff5d7474d6322efefcf17fe45ef64a9f9ad192049d03265443f0f24f41e2ba5a8a81095c3d7f9de7ab2cd4
SHA1 hash:	9e7bf2b7e078c9091307aea5c99e97973f21b213
MD5 hash:	2c7d3c7a1581b4c765b08cce8d143cfd
humanhash:	dakota-carpet-juliet-green
File name:	and
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	3'478 bytes
First seen:	2025-04-16 23:38:03 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:N08fu1AVipxhSI42EN41a5KpKjGH74LOQ7YcBHN:o1AVUv4N445qe
TLSH	T19F7107CB1363651D8A4F84937792860936507EE6F0983E48F49813B19347AAEB9D4FEC
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68008ff4280f5f89a0d02654linux22vpnfull_triage

Tags:

malware

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/68003f6090767142c3d80ce5/reports/49541bd9-60ed-4b6e-bb99-62b13c7f6c6b/overview

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/b55f41e2772063529f45c0769f0937efd1ec54986731f03bb8b9b752fcbfea1b

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b55f41e2772063529f45c0769f0937efd1ec54986731f03bb8b9b752fcbfea1b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b55f41e2772063529f45c0769f0937efd1ec54986731f03bb8b9b752fcbfea1b/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Vigorf

Threat name:

Script-Shell.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-17 01:42:00 UTC

File Type:

Text (Shell)

AV detection:

12 of 38 (31.58%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wvpudytxebrvfh2fyb3j6cjx57i6yveym4y7ao5yxg3vf7f75inq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250417-fn8mwsyxaz/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.