MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73
SHA3-384 hash:	b23ee6b86979ffd9506ac539be040a17f686277730b4cc48bc2473e4ea6fae9fe1751a80e9de9a4551b652fca1c51daf
SHA1 hash:	b435416e468bc2f182cc9d346bfb793609d6f13f
MD5 hash:	ffdbcb2056cb5665a3ec40eae502b7c9
humanhash:	six-wisconsin-lamp-whiskey
File name:	toto.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'065 bytes
First seen:	2025-10-18 05:50:38 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:AW99wa39uNIQr9zvKQ9r959tr9IMK9Q99U9G+9xwDv:mNIWKZsuwDv
TLSH	T1DC1181FA00366124AC006F22755608356CBBF7E291379AF8D6BFE42391CB9D47720EB5
Magika	asm
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/68f32ac9fd2d7e012f4aefc5/reports/8fcab597-a70b-455d-9d8f-d91ebd1a7bce/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2025-10-18T03:01:00Z UTC

Last seen:

2025-10-18T10:08:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/d6617d6f-8b6b-4b2b-97c6-ae65ea4d9a36

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73/

ReversingLabs TitaniumCloud Win32.Trojan.Egairtigado

Threat name:

Win32.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-10-17 23:11:53 UTC

File Type:

Text (Shell)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=casiykt6dxlo74qt6plwknlqdxf4ptaf2t6f5rkqo5vyv6zxrjzq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251018-gj96lacr8w/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/10248c2a7e1dd6eff213f3d76535701dcbc7cc05d4fc5ec550776b8afb378a73