MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc
SHA3-384 hash:	c3815563ade6556a8590558de10977b514b09684827f4006a31a758199b97f7e68ac84be22b621925f55e15d9adf48ad
SHA1 hash:	f0f43eae29f60afd506c0d18873f3e8151d9f82b
MD5 hash:	c5d55505a9f46fe5e56b28a1085c1442
humanhash:	december-carpet-jupiter-tennis
File name:	telnet.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'778 bytes
First seen:	2025-08-02 17:49:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:ofmdtVNaKM6bODOmFkfw1J1at1YoLBYtp77tLByCBwltuANyhyZCK:ofqZFMDzF380thtZ2
TLSH	T14B3178CD72E09153E541CE01F261428FB39FFDC8A2B44E61E4C23C6A9045A92FC7D697
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/12287056-09e9-4e9c-90c9-89214819b27d

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc

ReversingLabs TitaniumCloud Linux.Trojan.SAgnt

Threat name:

Linux.Trojan.SAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-02 17:50:31 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cddonx7u6jkyyfol5iutrz22xlz2vz6cvqe5ezk5pt6akw3c4hoa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

antivm defense_evasion discovery linux persistence

Link:

https://tria.ge/reports/250802-wet15sszez/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Writes file to tmp directory

Changes its process name

Checks CPU configuration

Creates a large amount of network flows

Enumerates running processes

Modifies init.d

File and Directory Permissions Modification

Deletes itself

Executes dropped EXE

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.75

Link:

https://yomi.yoroi.company/submissions/10c6e6dff4f2558c15cbea2938e75abaf3aae7c2ac09d2655d7cfc055b62e1dc