MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e8c194ab593ba81d9d0e29de0721b1947bf1373b3e347cea785491e65712ae67. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e8c194ab593ba81d9d0e29de0721b1947bf1373b3e347cea785491e65712ae67
SHA3-384 hash:	7e2b9ebd094d6a9b7f8c5ee26936c1f15c351705bbd7d5860b32d65a2206b676930573436ae611e76c2afb122ace4176
SHA1 hash:	09a68ec23bf6e3caa64c6872a7c2226eecd8e48c
MD5 hash:	3b94689550065e1ad3d881d79315adab
humanhash:	september-island-bravo-sweet
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	623 bytes
First seen:	2025-04-25 12:22:52 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:QvJXOpue8f+AiJKgCWKDbnPZzJ+jvKbFUd6pyhFFX0LK2a:QvZi4wDIbZ4vKbFUd6pyh/CK2a
TLSH	T1D7F026DAB425BD625CD1DED2F0F7940590C2FBC565280F1DA9E17C7B789C9107151F12
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

73

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680b80fa3d067f8483993efalinux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/680b7eb046fe05453ca710ff/reports/d1ac258d-854d-48c2-8fd4-ebade7a8892b/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e8c194ab593ba81d9d0e29de0721b1947bf1373b3e347cea785491e65712ae67

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e8c194ab593ba81d9d0e29de0721b1947bf1373b3e347cea785491e65712ae67/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-24 04:42:20 UTC

File Type:

Text (Shell)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5dazjk2zhoub3hiofhpaoinrsr57cnz3hy2hz2tyksi6mvysvztq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250425-pkkakaszgx/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/e8c194ab593ba81d9d0e29de0721b1947bf1373b3e347cea785491e65712ae67