MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c433957cc91e17664147cbbb9dabcee58a81747a4e4b3fdb233b6daedd8974ab. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c433957cc91e17664147cbbb9dabcee58a81747a4e4b3fdb233b6daedd8974ab
SHA3-384 hash:	7cf16673f18dd33991a627fc450ddf5f79c19e90bb9cb8436f45798691589cf6bba4643bb9b26db304446e38660a4f57
SHA1 hash:	97c0564cd279a257da480043ead71f9ec77c2ab4
MD5 hash:	02acf81019982d15cdf3029fb980071c
humanhash:	red-johnny-two-friend
File name:	f
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	152 bytes
First seen:	2026-07-04 00:32:54 UTC
Last seen:	2026-07-04 11:26:30 UTC
File type:	sh
MIME type:	text/plain
ssdeep	3:LrJZARFpnhFVZYRoM8aGBzSEyLTUWnD9nhFVZYRoVWJNBzSE8eUwn:LrJ+jphviR+I/D9hviRIWTZn
TLSH	T1FEC08CAB847820448281FCA27862433F22EBDBC01124270CD2CC3523CC98008F838EC6
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

401

# of downloads :

1

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

downloader mirai

Link:

https://www.filescan.io/uploads/6a48b2676b0ebb8e1b756c8f/reports/168f3ac7-3041-45c7-b195-194b5b6322be/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/065e9096-4294-4294-a7a5-472f4a714c02

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/c433957cc91e17664147cbbb9dabcee58a81747a4e4b3fdb233b6daedd8974ab

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script.Trojan.Heuristic

Threat name:

Script.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-04 04:14:35 UTC

File Type:

Text (Shell)

AV detection:

4 of 36 (11.11%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yqzzk7gjdylwmqkhzo5z3k6o4wfic5d2jzft7wzdhnw25xmjosvq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260704-h1vb5sgw4k/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/c433957cc91e17664147cbbb9dabcee58a81747a4e4b3fdb233b6daedd8974ab