MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f6ad64d69267102380e00ad23774ac2b5fdbdd53b45ccc816b0984f765edc23b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f6ad64d69267102380e00ad23774ac2b5fdbdd53b45ccc816b0984f765edc23b
SHA3-384 hash:	a2f8cf5f0db06bd816d147e86e16dbb7b9c16c1714234f940f0d94936857b45d02779e4bbf2cf0ef56cd3a9e5d81d821
SHA1 hash:	7205fc9c7f29df8b1f7eebce9a8fba5b606836af
MD5 hash:	e2b0f4c97d543edaa126e0a941c1418b
humanhash:	dakota-london-pip-hydrogen
File name:	basic
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'337 bytes
First seen:	2025-03-02 16:46:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:o+xmQLCMhnMHV5X3aRyTkQEk6ZIyRBSpPQ1yV+O:okVGS6V5HaRUnO2IS+UV/
TLSH	T15321FDCB08D6C7E1CDD6552070A9CC65779BF7877CA31A1A9FA900B0CD458C17AC8AD5
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

89

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c48c9cc668b65489be689clinux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

bash lolbin mirai remote

Link:

https://www.filescan.io/uploads/67c48b9de95d0f9029e272fc/reports/a289193f-1164-4291-b37c-b05cc0d055cb/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Malware

Score:

96%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f6ad64d69267102380e00ad23774ac2b5fdbdd53b45ccc816b0984f765edc23b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f6ad64d69267102380e00ad23774ac2b5fdbdd53b45ccc816b0984f765edc23b/

ReversingLabs TitaniumCloud Script-Shell.Trojan.Multiverze

Threat name:

Script-Shell.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-02 16:48:10 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=62wwjvusm4ichahabljdo5fmfnp5xxktwromzallbgcpozpnyi5q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250302-va45waywcz/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f6ad64d69267102380e00ad23774ac2b5fdbdd53b45ccc816b0984f765edc23b