MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 40bf2c1eef5844746d89c1253ccbc151707f93217fa28fc702a381e38cb76301. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	40bf2c1eef5844746d89c1253ccbc151707f93217fa28fc702a381e38cb76301
SHA3-384 hash:	0b2494e35d3f763751f947845436be898fd75ee5723ea30d1d9bcad886a5cf1c2e48c96f92b62b2855463226ae31d146
SHA1 hash:	109759b7514b5c1fd3c49190daa3a0d0f067ee16
MD5 hash:	9d1fa6144006d5faff591137d4e6e47c
humanhash:	florida-island-cola-nevada
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	773 bytes
First seen:	2025-06-06 17:26:33 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3VExqxVaRHxVrNIjlTBAxV4iKl2ExVX1xVf9qxVuFG10qxVN6ZxVedKAxVtxVA:3J3yxL5NIpOKltm16H4ORn
TLSH	T1F7015EDC427166261B2CCE1DF77F91185482D9D0F7720D09E85804AA9CEC38BF065F97
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

76

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=684325718bd5d68a12e60aealinux22vpnfull_triage

Tags:

mirai agent virus html

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/40bf2c1eef5844746d89c1253ccbc151707f93217fa28fc702a381e38cb76301

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/40bf2c1eef5844746d89c1253ccbc151707f93217fa28fc702a381e38cb76301/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-06 10:02:00 UTC

File Type:

Text (Shell)

AV detection:

15 of 38 (39.47%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ic7syhxplbchi3mjyestzs6bkfyh7ezbp6ri7rycuoa6hdfxmmaq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250606-v1mzaa1tas/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/40bf2c1eef5844746d89c1253ccbc151707f93217fa28fc702a381e38cb76301