MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b
SHA3-384 hash:	bca23f8c4a89ab6d9947642675fbea0fe24518676c7b161c40af8092d3715d3e93e5378f6aec087047a22b65b4bf29cc
SHA1 hash:	4d48294e73e3351519bb02e7c9957d20eeb894c5
MD5 hash:	2f317e9245db7871e85474c0d1afffaf
humanhash:	edward-uniform-saturn-saturn
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	798 bytes
First seen:	2025-08-19 18:04:06 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:5ogYUxNI7lBKV8+I5xjiLT5wklRFtu6RHUjn:5ogYUslB2ZI5xOf5wya6R0j
TLSH	T193010CDE773671665B04CF34726644889136B3C033B02B6ABCD61CB3C8D9A00B22EE6D
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.32160.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68a4bcb7abfbaec31825f3c9/reports/58ffe82d-6a5c-4b01-b68c-6627c63c8680/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/ceb5b214-44f4-4f50-9a4d-2aae07dfc12e

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-19 18:05:53 UTC

File Type:

Text (Shell)

AV detection:

16 of 24 (66.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4uu6vdugu6mcxoxcg5eeno22m64tmzstjfbucmlfl45ugwsktefq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250819-wnvzsswnw3/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e529ea8e86a7982bbae2374846bb5a67b936665349434131655f3b435a4a990b