MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e
SHA3-384 hash:	2720ffd3da4cd01bcfce44ff335cfad0f445abbc6f7ce9e30d4f07de9c9439f8c891e3932ef05f05af39be2663a7cf1a
SHA1 hash:	d2a7f010850b0d0d041239b94a4a6051ff29538c
MD5 hash:	aecba18f06b8d3f47d442bc8107ec210
humanhash:	arkansas-north-mango-california
File name:	and
Download:	download sample
File size:	3'543 bytes
First seen:	2025-04-13 23:27:01 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:xwEsWXZfX1AyRpxeghznzO41aqKCKOLU7ZKO37J9BH8:Lf1AyhBza44q20
TLSH	T17B7108CB2363682D0B4FC890F695860A75517EC2F08A2758D45812777247AADF4E4FDC
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

136

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67fce34c1dba888a93d371a3linux22vpnfull_triage

Tags:

mirai virus hype sage

Hybrid Analysis Bash.MiraiA.Generic

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Alevaul

Threat name:

Script-Shell.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-14 01:18:00 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5veoqdacenqqqo522mi6ducxxnqecu2srdnd7tzjvzcpj5omlzha._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ed48e80c022361083bbad311e1d057bb6041535288da3fcf29ae44f4f5cc5e4e