MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125
SHA3-384 hash:	499930061772d81fc41cd604d6d0154212d7ff3193e1cdd440601351ed9e0dc88ce9d0aee434de1c8afc0ac14e3236a7
SHA1 hash:	61d5c837edab0ce64353287e64914cd92998983f
MD5 hash:	eb686f37e40a329e6dc441a3868f0b9b
humanhash:	texas-india-princess-happy
File name:	router-atemi-rep.sh
Download:	download sample
Signature	Ngioweb Alert Create hunting rule
File size:	824 bytes
First seen:	2025-11-08 07:54:35 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:7RDzyi+eqDiyi+eqDxyi+eqDHyi+eqDXgyi+eqDvyi+eqD7beyi+eqD7keyi+eN:19+Fs+FD+Fp+Fa+Fx+Fvw+F4w+S
TLSH	T16F0192BEC9685CDAD008CB007C706052511EC7CB6DE90B36B3BC2E7340AEA10702B63E
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

38

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive mirai

Link:

https://www.filescan.io/uploads/690ef7692b74ec26eb6b7b05/reports/1a62caf1-6c6f-4c51-8340-cbea0dea373a/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-08T05:23:00Z UTC

Last seen:

2025-11-08T05:57:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/9bf4314c-19b7-4c23-9c2e-027837927a90

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-11-08 07:55:22 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xa7mndyadb6xp6ul63lzffkeoaiwycmii6x5o4bf6ti3b23wkesq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251108-jr9adadr5z/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b83ec68f00187d77fa8bf6d792954470116c098847afd77025f4d1b0eb765125