MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 f4543d83148d2f87e0c61cdbe6ac96c66e826ffa45e6f8261ed9f28ba3406de5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | f4543d83148d2f87e0c61cdbe6ac96c66e826ffa45e6f8261ed9f28ba3406de5 |
|---|---|
| SHA3-384 hash: | a6daac4c1b00d7a5dacd08c9e43848483e4abcdf78cfa1e38e99afce8440eeed8404e95815a5f08673da7ea0021b2ff9 |
| SHA1 hash: | e07e9106b7317d520d169d06959810253113187e |
| MD5 hash: | 90fab6fcbf088755b3035d5b9e93dc90 |
| humanhash: | dakota-xray-alpha-stream |
| File name: | faith |
| Download: | download sample |
| File size: | 172 bytes |
| First seen: | 2025-03-30 01:13:03 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/plain |
| ssdeep | 3:LMFbR0UNJRIMVWWFbFjBDKzSHX7F0QxUCgMFbR0UNJRIVOyzhFjBDKzSHX7F0QxU:LMFbWU3uKbRB9LF9x0MFbWU3uVzzhRBk |
| TLSH | T18AC080EF0C01471C8D05A44518F3A5327002C1E830C0D908CCCF3C3458989007434FCC |
| Magika | shell |
| Reporter | |
| Tags: | sh |
Shell script dropper
This file seems to be a shell script dropper, using wget, ftpget and/or curl. More information about the corresponding payload URLs are shown below.
| URL | Malware sample (SHA256 hash) | Signature | Tags |
|---|---|---|---|
| http://154.205.128.91/zd2/mips | fba7bebf259ea5904705b2ce98b73a7ef017b7cf64565779a1afdfc437a46ef0 | Mirai | elf |
| http://154.205.128.91/zd2/mpsl | d03b5802a4b100ea40955e03384d9d904ff17801d6254a06563d96028b440c93 | Mirai | elf mirai |
Intelligence
File Origin
# of uploads :
1
# of downloads :
93
Origin country :
DEVendor Threat Intelligence
Verdict:
Clean
Score:
82.2%
Link:
Tags:
n/a
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Tags:
lolbin remote
Verdict:
Suspicious
Labled as:
SH/Mirai.C.gen
Score:
100%
Verdict:
Malware
File Type:
SCRIPT
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
sh f4543d83148d2f87e0c61cdbe6ac96c66e826ffa45e6f8261ed9f28ba3406de5
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.