MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd
SHA3-384 hash:	77e745e1c445a2602be01ab905a1c105ccec08074385ee3d67b1d514a5da2e0d6134d54fa83f6339ed417a27c27c9001
SHA1 hash:	ac5f15f7f8d9247f1bf5eb0d5071d8a0374c43e2
MD5 hash:	eb826e86eeb8b6309e2cfea176847edc
humanhash:	connecticut-johnny-april-quebec
File name:	wifi
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	105 bytes
First seen:	2025-09-18 16:59:43 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:6SDi6qLXzkWRGNBzSCyRGAVqMiRGoPLQqEgWvn:5DDq8WkoHyj8/jn
TLSH	T1C6B0926AB021AC00E00C2A4098AA03A8B51A886112584A79284E323AE6A9430702B546
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68cc3b77390649f7a5f2f1a6/reports/80edff55-bbfe-46f7-adcd-2e798702352a/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-09-18T14:29:00Z UTC

Last seen:

2025-09-18T14:29:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2d0a4afb-5867-46db-bb84-82c58d168793

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4eyzf7bbp6tgvnpskoy2hxtg2uj52vwhvw67rmcax62n2tnlpc6q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250918-wf3dxatry9/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e13192fc217fa66ab5f253b1a3de66d513dd56c7adbdf8b040bfb4dd4dab78bd