MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf
SHA3-384 hash:	07bdf9c4b02b039da70752028e2e3a48e6e547290a8fbe1769feb6037278751c047b21259dcc075b6abfc707c8d39c77
SHA1 hash:	28064b3ee00b572e5631bb7d25425bd88bd9c0e4
MD5 hash:	5d799bc1e9042ecb674e5000268886a8
humanhash:	london-early-uranus-autumn
File name:	t
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	361 bytes
First seen:	2025-12-06 07:32:43 UTC
Last seen:	2025-12-06 12:03:52 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	6:h9OnFflE0FJByQ7BodAjJdyzHGdyzNdyua/iKHEIDEivpv:d0FJJydAjJdyzmdyzNdyua/5hd
TLSH	T185E0D8CDB4630073285DCF1BE0A4454DE451F89559D03E94589F3C19383EC1270F5637
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

33

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Bash.MiraiB.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiB.Generic

Link:

https://www.hybrid-analysis.com/sample/e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-12-06T06:34:00Z UTC

Last seen:

2025-12-06T07:05:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf/

ReversingLabs TitaniumCloud Script-Shell.Trojan.MiraiB

Threat name:

Script-Shell.Trojan.MiraiB

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-06 07:15:57 UTC

File Type:

Text (Shell)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4hnuhkyaf4rkh63he7aekhyzbz7umiv4cej5vf5jmcdinzdqrtpq._file

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/e1db43ab002f/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.28

Link:

https://yomi.yoroi.company/submissions/e1db43ab002f22a3fb6727c0451f190e7f4622bc1113da97a9608686e4708cdf