MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde
SHA3-384 hash:	accb2663b994ff9c5935ad1f9beb55ba02c41ed176b65d68d67fb23fbcc148458e6edcf679419ef7ed011ac926d86699
SHA1 hash:	27f9a4f6bf4ee66bc212dd79e2d9dc0b3da8ad33
MD5 hash:	ab6c4b6a54da2c8673ee2d68163e94ed
humanhash:	violet-monkey-undress-red
File name:	massload
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'190 bytes
First seen:	2025-09-08 15:56:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:boWBGhBh9Mk8Qokw5S2x5oV2tKXbatkk0:boGGhL8QoMQtuat/0
TLSH	T106219ACEF592D3B10D9C8E00A1D2C826A01A6BD710A08D6CB89F1CB5BD6CE51F059BB1
Magika	shell
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

29

Origin country :

DE

Vendor Threat Intelligence

Hybrid Analysis Trojan[Downloader]/Shell.Agent

Verdict:

Malicious

Labled as:

Trojan[Downloader]/Shell.Agent

Link:

https://www.hybrid-analysis.com/sample/f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2025-09-08T13:48:00Z UTC

Last seen:

2025-09-08T13:48:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/b25f513a-6e8c-428a-bcc9-e1d4802cbb21

Nucleon Malprob Malware

Score:

93%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-08 15:22:20 UTC

File Type:

Text (Shell)

AV detection:

15 of 38 (39.47%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6kfpoop2aw7brjo6mjhijq76p66inna3wnefnxtezfsb2ozcvppa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.31

Link:

https://yomi.yoroi.company/submissions/f28af739fa05be18a5de624e84c3fe7fbc86b41bb34856de64c9641d3b22abde