MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e
SHA3-384 hash:	61054748535d78b5bd0996e1da9c6a9aae97ebda8f156c46fccbb0c8ffaf98c4f8dc13c2b5e20df1115e7cc1ef4c2aae
SHA1 hash:	2edbecc80de107ce3459b4fc29a0d54b198edc58
MD5 hash:	f07c2c387918ed608d48cbca00dd4f6c
humanhash:	alpha-shade-coffee-pennsylvania
File name:	abc1.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	707 bytes
First seen:	2026-02-17 17:12:44 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3X1eLqQXcjQXiNIl5zAQXP0LKjQXuOsQXiCQXc/QX6cSEQXotaKAQXK/iAQXKK:3J3qaZNI7WKRT2bcZtBq/dhA
TLSH	T1BE011E8D2BE4B1879E0C9E08F16A821C7940A6C072B40D55F364B870D8DD210FCA8F7A
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

53

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6994a1bf981ff1d38a592646/reports/5b40f17b-830e-4233-88dc-d1205583e22f/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/3292b4f5-4997-4c43-9f95-e433426c1c59

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-17 16:45:08 UTC

File Type:

Text (Shell)

AV detection:

7 of 36 (19.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=37js3sinvkjntjntdoy5no7a6xefqazctu7bul3rknfdub74beha._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260217-vrml6aft4f/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e