MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c304ed6a5bf8eab03e0b43a3ee90f0af9465a69bdb727152c118c7baea2e99bf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c304ed6a5bf8eab03e0b43a3ee90f0af9465a69bdb727152c118c7baea2e99bf
SHA3-384 hash:	d7d1c612600f27114120a6a9069dd3f75a9db4307a429595e6700436df56cf99f4612d176d13dcfd9b0b9917904c0e92
SHA1 hash:	8206af4c381bd4b6b819395f733d10c003ec91c0
MD5 hash:	af6afcf7e935683e32fdf9f38042395c
humanhash:	river-white-fish-fish
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	886 bytes
First seen:	2025-05-12 13:03:02 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:Ncgt67tiNI75t6KgtuitiDtc8tVEt5ytBltRtWatsHR:2gI7h5EL8iYS8kMlndWx
TLSH	T130115ECF31A9D6310E4C8D8074AA84186544FFD33054CE4D695D8CB27D88B19B5EAF5C
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

79

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6821f2924a59e5a2ce03e499linux22vpnfull_triage

Tags:

mirai ddos

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6821f19a0b64e174c42304f6/reports/ffd11764-68c4-4c68-b94b-3e2228887739/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c304ed6a5bf8eab03e0b43a3ee90f0af9465a69bdb727152c118c7baea2e99bf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c304ed6a5bf8eab03e0b43a3ee90f0af9465a69bdb727152c118c7baea2e99bf/

ReversingLabs TitaniumCloud Script-Shell.Worm.Mirai

Threat name:

Script-Shell.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-12 13:03:25 UTC

File Type:

Text (Shell)

AV detection:

19 of 37 (51.35%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ymco22s37dvlapqlior65ehqv6kglju33nzhcuwbddd3v2rotg7q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250512-qajfyssvev/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/c304ed6a5bf8eab03e0b43a3ee90f0af9465a69bdb727152c118c7baea2e99bf