MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d
SHA3-384 hash:	d5038e0226329c76b0d0972ef7e79f66cdb9840f3b2caca251754a0b15a1effe9475e9aecc54792e2087a901f1324f9c
SHA1 hash:	d45af0283b35587253fe2e9958006daef83ffca1
MD5 hash:	afac81170d9bb2a4b663041e66a25ce9
humanhash:	rugby-earth-mexico-india
File name:	x86.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'146 bytes
First seen:	2025-11-16 19:20:31 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:AxoaqWNIQkD7vKCScDvSp3g0cSsMDufDJb1v:8NIxKCJ74QPthv
TLSH	T1D621E4FA2019512652087B11B16A48366CBBF7E270729EF454BFE42351CF5D03B23E76
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/691a2431a130a437f88f1615/reports/25db00d8-f661-483f-8486-9e3fd77bc295/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2025-11-16T16:47:00Z UTC

Last seen:

2025-11-17T10:20:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/7c98a9a9-2dfc-47aa-b3b3-e622c2a75079

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-16 19:21:21 UTC

File Type:

Text (Shell)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3j2u2uepyo47vytclff5qvi4gtnpsv2vf5pmmhs2pvc3d7kho56q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251116-x2tvbswmfz/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/da754d508fc3b9fae262594bd8551c34daf957552f5ec61e5a7d45b1fd47777d