MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 40c54ce67a4af140f6b0256ee59108890ffd02abacecb61ac0b3fff98d44e002. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	40c54ce67a4af140f6b0256ee59108890ffd02abacecb61ac0b3fff98d44e002
SHA3-384 hash:	9439e6f8b4bf7a24a60b1c4c76ccfeef126a60b7e58a395eb41654b9505a65d56d7f4f3056d3ab045ed8d987c09cbce4
SHA1 hash:	388affbc4bbbe4c93e9e4191efa1caf06b7cc49c
MD5 hash:	00eb9ebf92222b5680d1edad40ed2274
humanhash:	pennsylvania-wisconsin-quiet-hot
File name:	c.sh
Download:	download sample
File size:	393 bytes
First seen:	2025-05-02 14:32:00 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3j8qxjoNIl5zAxjZf0LKjxj8CxjkxjEiAUn:3J3gZNI7IqK6K2n
TLSH	T11DE0ED8C615023A75F2CDF18F12F82099442E2C0B0B46FD0A55551B1ADAC3017194F27
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

62

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6814dafa4355f44aee686b7alinux22vpnfull_triage

Tags:

trojan mirai virus hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6814d7670b64e174c414d8da/reports/162716bc-93eb-41a9-a666-8073c9547ab7/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/40c54ce67a4af140f6b0256ee59108890ffd02abacecb61ac0b3fff98d44e002

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/40c54ce67a4af140f6b0256ee59108890ffd02abacecb61ac0b3fff98d44e002/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-02 14:15:26 UTC

File Type:

Text (Shell)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=idcuzzt2jlyub5vqevxoleiireh72avlvtwlmgwawp77tdke4aba._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250502-rwa75scq9v/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/40c54ce67a4af140f6b0256ee59108890ffd02abacecb61ac0b3fff98d44e002