MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7
SHA3-384 hash:	8caec92ccf0499cd2ee6547b3f09e546bbddb50cafdaa0f0498ae5b790508458400cc08c3418cd0edbc9c7dc15a0233a
SHA1 hash:	5ca22ab14c241b4f62d79418d8aad3fbe19d98a7
MD5 hash:	d1d50bba5f16915ec0b9ddf777b98b1f
humanhash:	wolfram-lithium-undress-ack
File name:	fc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	669 bytes
First seen:	2025-04-27 16:37:38 UTC
Last seen:	2025-04-28 02:30:58 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:U1pftKLK+4qmM6PRnfM/pKHc/3yREmMSnRnfM/pKHc/3yREmMS52U7REmMSt7Y7U:U15eKW6soe3yqSsoe3yqK2aqWaqf
TLSH	T1DF01F963660C74F0BBDA9416F6A78BA5A9EDD0CB2C430920E538C3D66C948244974F60
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.BV.Downloader-AEH.12177.9114.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

93.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=680e756acc5fb3600cc37259linux22vpnfull_triage

Tags:

mirai agent hype sage

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

lolbin remote

Link:

https://www.filescan.io/uploads/680e5d7d218c4a98ade3f9f2/reports/b7c2b2ac-6e73-493d-be99-e1ebb9ae92cf/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7

Nucleon Malprob Benign

Score:

24%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-04-27 17:46:34 UTC

File Type:

Text

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5rmvt6oythsuqpyg7a5bus4ol6souu54cy367cmugxxbcb3f7pdq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250427-wpedfazks9/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ec5959f9d899e5483f06f83a1a4b8e5fa4ea53bc1637ef899435ee110765fbc7