MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58
SHA3-384 hash:	e9a389e5445b6830363addf5ff070293d3e1a0907c8405bfd3a24b1e9b1a57c4d035b86802499a7df7ae501c86de9203
SHA1 hash:	d5bbc007b496a0ecc480cb3989903823908f167a
MD5 hash:	79c92e0435c96085b5f5bb0c3f0e2644
humanhash:	carolina-carpet-lemon-magazine
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'054 bytes
First seen:	2026-02-08 19:59:22 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3CxObYxjIXRxxNI5ncx1rKD7xUpuxd+DxfspuxBCquxtukSxcxWxyvY7xTMuHR:0eIoXAExyNkyMVfMyIqyQkOu66Moux
TLSH	T10F11A28D2251DE47DF0DAF0C7E55F50C6284E7F8F6A18A21E41B48BC679C2047067F2A
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

28

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

bash lolbin mirai

Link:

https://www.filescan.io/uploads/6988eb61930564ff3c92b59f/reports/0931b24f-57eb-4ced-9f40-d6b4e13f5a48/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/52891534-5f93-40c3-956d-87c51e828b89

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-02-08 20:00:57 UTC

File Type:

Text (Shell)

AV detection:

11 of 36 (30.56%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fqlq6xsa6vk2wiyrw3xglkb5xbq6kwmpmpcqba3kibvcjgnvn5ma._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260208-yq9bbahz7e/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2c170f5e40f555ab2311b6ee65a83db861e5598f63c500836a406a2499b56f58