MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974
SHA3-384 hash:	e985c9b1adef574cda32c90bfca7e47bc75fc6bac80b7527b480901f23118eee0d0ceea75c32ae8753abff5de6d1cbba
SHA1 hash:	0c2578a1062eae2b8b9f3ea884c7fce0dede23fc
MD5 hash:	0104fe766d4d575e47a948c95d16d68e
humanhash:	twenty-oregon-social-coffee
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'944 bytes
First seen:	2025-11-17 09:45:55 UTC
Last seen:	2025-11-17 11:08:49 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:z5EMy0MBBxuV+LzKXRCOg3Pe3omDUgHZgHJLvmkKXO4952n3KXZ:z56pu6zFgZHuHhryy3i
TLSH	T1DE41CDDC7EA19F635449CF80F6230A1D600FEEDAA8848EF8D8DDBC5D84BCA0D7416685
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

49

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/691b59959c3d5abe0ccb1bef/reports/b43646b3-a745-4015-a4c7-45fa2c4c43f2/overview

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-11-17T07:25:00Z UTC

Last seen:

2025-11-17T09:51:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/ed03951c-9d7e-422d-848b-ced35dca46c4

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-17 10:10:15 UTC

File Type:

Text (Shell)

AV detection:

14 of 36 (38.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2jp7e5i3otgevxglndymk6ptm5idoeby4o6iiwggubx2sxrerf2a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.34

Link:

https://yomi.yoroi.company/submissions/d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974