MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028
SHA3-384 hash:	4c5f58dc94faa4a1a4c63b0d524546116826d9b3390d51586f38afdff9015fbc01c5ffdc2569a7aa25501e7720d40bad
SHA1 hash:	3aca634007f43a54298dd3a2cdc71430abc6676c
MD5 hash:	16c9e11209e59c90985c648311bda506
humanhash:	autumn-colorado-friend-butter
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'241 bytes
First seen:	2025-08-11 12:59:03 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:hENEC+dllNnial0jZLZYPqDjliJlGMYq8S7GkUMp3XiolSxzlcdHA:/C+dllNial0jZLZYPqDjliJlGBqfCkpy
TLSH	T17C21E2CE03A9595088584DC13196C124AECDCAD63C614FAAA0CE4CF360C9E20BB34FD9
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

37

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

busybox

Link:

https://www.filescan.io/uploads/6899e9329ef4d2ff7cf62af4/reports/1523a91a-a738-499d-b1d1-adf2e19f7930/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/8c7bcb88-00dd-4ff9-9995-292f5ea809aa

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028

ReversingLabs TitaniumCloud Document-HTML.Trojan.Egairtigado

Threat name:

Document-HTML.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-11 07:57:05 UTC

File Type:

Text

AV detection:

17 of 38 (44.74%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=43ddoazfxrxo3d4g7tggfplhvnhkgdd6nv2nudcoev64m2tp4aua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250811-p79tqsbp7w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e6c6370325bc6eed8f86fccc62bd67ab4ea30c7e6d74da0c4e257dc66a6fe028