MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459
SHA3-384 hash:	a706861503fe8f8c849799c520050ae8037b1db162628c3367aae84013858b865524a8cc3c78a4464716cb0f3c1b8cf2
SHA1 hash:	e603944aceb5c0885a8627de12f36b159bbf2f05
MD5 hash:	d0d36f169f1458806053aae482af5010
humanhash:	magnesium-louisiana-snake-california
File name:	10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459
Download:	download sample
File size:	3'685 bytes
First seen:	2023-02-04 16:56:23 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	96:BsBwsYLuB+o6Kq/1IFozRu92EFqGaX1u0:aBwnLuB+oad1g92wqG/0
TLSH	T15E71CFC7F141EDB45C8C94B6AFA6BC5CE44A61481C097B04B64FB129F7CCB8B369A11E
Reporter	petikvx
Tags:	ESXi Ransomware sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

507

Origin country :

FR

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/63de8e5f905a5ac3b909728a/reports/1f8fbebc-7579-4e71-b119-b101dfe6de6a/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459/

ReversingLabs TitaniumCloud Win32.Ransomware.EsxiArgs

Threat name:

Win32.Ransomware.EsxiArgs

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-02-04 16:16:57 UTC

File Type:

Text (Shell)

AV detection:

13 of 26 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cdb3nmb2tpyqlutevdt7gdokwctmlgsbiuu3blyknpm7duuyirmq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  9/10

Tags:

linux

Link:

https://tria.ge/reports/230204-v1zyvahc5w/

Behaviour

Reads runtime system information

Writes file to tmp directory

Reads CPU attributes

Writes file to system bin folder

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.38

Link:

https://yomi.yoroi.company/submissions/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459