MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec
SHA3-384 hash:	28ec4480a1e9a6f0cdc421ee1fc0c0080a58108726d83261bab4ebf8a6fec4d1bd2c8afe6155d4b4058a2527433ebef0
SHA1 hash:	bc8cc4a810760f426506abc6c8ecb03c8854da3a
MD5 hash:	36bd7bdd7a777c6225c89af7f099cb30
humanhash:	timing-tango-montana-table
File name:	adb
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	603 bytes
First seen:	2025-07-29 06:55:18 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:UdbjkuFQsPYv5Ypw/FcTrUBZFBxvT4ITTrUSBTwyT5mbKz3b:skK/P5pwrB7BuIgDQmuzL
TLSH	T1A3F046B178524D32E8BE8F6B7205C84CF84B4072BD908D903CD7AEB14F79C18642581A
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/6888717913488cfd44ddbbbd/reports/d297c944-f48a-493c-9e44-bfae5b70a0da/overview

Hybrid Analysis TrojanDownloader/Linux.Shell

Verdict:

Malicious

Labled as:

TrojanDownloader/Linux.Shell

Link:

https://www.hybrid-analysis.com/sample/ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/101e4314-6a33-4867-83bb-7ad743a39058

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-29 06:43:25 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3xhvw6yynek3nsngjiagjnsuplaxjlcg3o5kiceexfkdd5vuf3wa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250729-hv8mksej7v/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ddcf5b7b186915b6c9a64a0064b6547ac174ac46dbbaa40884b95431f6b42eec