MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f4adc24acf27f8716d25cd56bb763bc58abeb100aff90c5244600996e2fcce96. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f4adc24acf27f8716d25cd56bb763bc58abeb100aff90c5244600996e2fcce96
SHA3-384 hash:	7c2c9ebbf01465dc6c77e27f09086e9defa5c0d3d5e7dcbaff70bdbb86da2289105723de095b5fb7dfe4f6238551d3da
SHA1 hash:	760f3bf679802d889849db959b0e4cc03b1f03a7
MD5 hash:	ee72bb4ab2984f1694c8b896fd862443
humanhash:	pizza-timing-mississippi-yellow
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	900 bytes
First seen:	2025-02-24 18:36:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:iaEVNNIl5y0LKm7gOb8eM8ON5jaGBtFDUbA:nEXNI7ZKRAI/BtFD4A
TLSH	T11A1194EF2AE112960C48CE4C746B4F1856469DC3E5540F5E544CB87E62EDE2CF172E5C
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

38

Origin country :

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67bcbc61a0fd713c335ca253linux22vpnfull_triage

Tags:

downloader mirai overt remo

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

lolbin mirai remote

Link:

https://www.filescan.io/uploads/67bcbc5f3afc3763bec4664f/reports/0263a753-b33d-46d3-8bea-a892c08f71c9/overview

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/f4adc24acf27f8716d25cd56bb763bc58abeb100aff90c5244600996e2fcce96

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f4adc24acf27f8716d25cd56bb763bc58abeb100aff90c5244600996e2fcce96/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-24 19:51:43 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6sw4eswpe74hc3jfzvllw5r3ywfl5miav74qyusemaeznyx4z2la._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250224-w9ke7axqx4/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f4adc24acf27f8716d25cd56bb763bc58abeb100aff90c5244600996e2fcce96