MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c788cbe8ce742e772871429842ba8442ed2069fb36aaa6690c945d290f93cd5f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c788cbe8ce742e772871429842ba8442ed2069fb36aaa6690c945d290f93cd5f
SHA3-384 hash:	9dc57c62eabf95e1aab9fefd5258307ae96298cb8a46557db8e3fb5a2b089c96825e9670712a49f2792040254a01cec5
SHA1 hash:	c6e54fcc92897d27d61fb7e5d1cb1eb3ffa55356
MD5 hash:	c75935fac257475b621c0bfc07433ed1
humanhash:	mobile-rugby-aspen-twelve
File name:	na
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	910 bytes
First seen:	2024-10-06 18:28:33 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:E9H69Lf9nNIqk9uKx19O9l9J89F9V1xT9a59tg9/xv:gCN9SA4owp
TLSH	T14D11BF9D1218A8440D19CDC2B19E0915A3C6CFD0B7FDEBB5AAC42F37889D500B044F8F
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

70

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6702d768b932c04ee8fd9233

Tags:

malware

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6702d6f41a45119227fd5d05/reports/d92707f7-d32f-4a31-88ef-a4f695ef672a/overview

Hybrid Analysis TrojanDownloader/Linux.Agent

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Agent

Link:

https://www.hybrid-analysis.com/sample/c788cbe8ce742e772871429842ba8442ed2069fb36aaa6690c945d290f93cd5f

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c788cbe8ce742e772871429842ba8442ed2069fb36aaa6690c945d290f93cd5f/

ReversingLabs TitaniumCloud Linux.Trojan.Mirai

Threat name:

Linux.Trojan.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-10-06 15:30:55 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=y6emx2gooqxhokdrikmefoueilwsa2p3g2vkm2imsrossd4tzvpq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/241006-w52hxatamh/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/c788cbe8ce742e772871429842ba8442ed2069fb36aaa6690c945d290f93cd5f