MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736
SHA3-384 hash:	f8b54ce657d6bfd1e2ebd6a960c63b37ff7b8ee38f11da89fac136a81eaa66d51f51188a2e005f6e944702d31ae1dabe
SHA1 hash:	79967b7f645ff0d701b6d829a51d7e5396232e93
MD5 hash:	1a1703d229ab16d08e5f835996833192
humanhash:	shade-louisiana-thirteen-lima
File name:	wr
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	226 bytes
First seen:	2025-11-28 18:06:33 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:L+iMITLGL68aGBzSEyLTUW2eHU0DiMITLGLjONBzSE8eUo9eHBSDiMITLGLFIQgy:LuI8pNIh00DBI8jONZ8EDBI8Fidna
TLSH	T137D0A79B355032458AC4DF02E56BAB2D3243C3CE94640BC878CD3032CDAC2187025F03
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-28T15:39:00Z UTC

Last seen:

2025-11-29T01:16:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan-Downloader.Shell.Agent.p HEUR:Trojan-Downloader.Shell.Agent.a

Link:

https://opentip.kaspersky.com/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/b54dd25a-b23a-42d2-9ca1-448a4cd37ac1

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-28 17:43:59 UTC

File Type:

Text (Shell)

AV detection:

13 of 38 (34.21%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ynr2usnk5uemrwwu7egucirmzcjnzxq5td5uw65acunev6ef243a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/c363aa49aaed08c8dad4f90d41222cc892dcde1d98fb4b7ba0151a4af885d736