MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bb374b50a81b3daa734062a8f087cc85bb675de908dea0a8154e686a466e9ce0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bb374b50a81b3daa734062a8f087cc85bb675de908dea0a8154e686a466e9ce0
SHA3-384 hash:	d33518d123d3f8c20624c82b7855a61265bca7bea48c312198e9b24c929f046e4a499ddfa75f64c19f3c4c6553520984
SHA1 hash:	30ad229f0f8c327c5f1a5c4a296499ee0f82256d
MD5 hash:	588c5df336267fb4f97a36ed8356b093
humanhash:	princess-sink-queen-august
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'067 bytes
First seen:	2025-04-17 09:44:21 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:GIbTmWIw8GxTTtHWvw3GxZz74sN1t8HGx5D3Zs2xuo3xj:jTmWIw/WvwmEMpJZR
TLSH	T1C1411E9867B2EE1BFD03AF00B1518301F8C7EEF12687CA66D59814F3C09CD287453A2A
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

61

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

97.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680114872203b3e10cd04c9flinux22vpnfull_triage

Tags:

downloader mirai agent virus

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6800cdb890767142c3d8cdd1/reports/eb9906f6-1dfe-4087-8eb2-d98228e2e850/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/bb374b50a81b3daa734062a8f087cc85bb675de908dea0a8154e686a466e9ce0

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/bb374b50a81b3daa734062a8f087cc85bb675de908dea0a8154e686a466e9ce0

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/bb374b50a81b3daa734062a8f087cc85bb675de908dea0a8154e686a466e9ce0/

ReversingLabs TitaniumCloud Script-Shell.Downloader.Heuristic

Threat name:

Script-Shell.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-17 10:53:13 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xm3uwufidm62u42amkupbb6mqw5woxpjbdpkbkavjzugurtottqa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250417-rvgcrsv1dw/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.