MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 db38b69a3444f00035ac36b2a82f7fc4c9bc9d30428100d7805016961b3253ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	db38b69a3444f00035ac36b2a82f7fc4c9bc9d30428100d7805016961b3253ee
SHA3-384 hash:	212525dd4526a92ed8bbd1009bdd6d6e4c5d8cbbd6d819f4c2e5a71c7d76bf12ef7bdf50fae46473ca3284b4658dae29
SHA1 hash:	c87661e2e4d48061690e85d856f3d7258b0862f6
MD5 hash:	c6381ebf8f0349b8d47c5e623bbcef6b
humanhash:	freddie-carolina-social-shade
File name:	c
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	184 bytes
First seen:	2025-12-10 04:28:14 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:he8zgMFZXLFLxUdVgZ8aOSZjZxvTFLK3iqP4KSEVMFZXLFLxUdsRzSBwmH3XKvn:I8zgMFZ5LS4Z86lFxK3iO4KSEVMFZ5LX
TLSH	T1D2C012FB00505070014AFE2034B14451A321D7B1379C5E06DFCD0421C4C8E84A468BA7
Magika	txt
Reporter	abuse_ch
Tags:	CVE-2025-55182 mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

33

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/db38b69a3444f00035ac36b2a82f7fc4c9bc9d30428100d7805016961b3253ee

InQuest

Result

Gathering data

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/db38b69a3444f00035ac36b2a82f7fc4c9bc9d30428100d7805016961b3253ee

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/db38b69a3444f00035ac36b2a82f7fc4c9bc9d30428100d7805016961b3253ee/

ReversingLabs TitaniumCloud Text.Browser.Generic

Threat name:

Text.Browser.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-07 21:30:12 UTC

File Type:

Text (Shell)

AV detection:

2 of 36 (5.56%)

Threat level:

  4/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3m4lngruityaannmg2zkql37yte3zhjqikaqbv4akaljmgzskpxa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251210-e94qdstnex/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.