MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db
SHA3-384 hash:	25647960d3ad41cac406bf3f67a7cd142d106b2adaa935f243800e6800f50a48928e79376d401f3ee66ece6cc229afce
SHA1 hash:	1da4534781f8ec7694169c24c4628db0269d7b01
MD5 hash:	ac275ed37855fe9914ee95a0a614a8ea
humanhash:	lake-cup-july-fifteen
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	788 bytes
First seen:	2026-02-22 14:50:02 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3n2snW20H2TNIfK2zKlF2FtBs2Xh2Ve2h2gV2Zs2C2Sn:MCB0WklzUIlbXE/EgYZbdS
TLSH	T1940184CE216556372B6D4E94BAAEA2485980DAD236740D24DA7408B36CD4302779CF77
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

45

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

bash lolbin mirai

Link:

https://www.filescan.io/uploads/699b17c797feb4afd651f263/reports/ea27974f-65c9-43d7-afc8-ea8c41af3b5e/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

Link:

https://opentip.kaspersky.com/4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/b122785c-496a-449b-9ee0-e613ebaf0f9b

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/4e3cb6b19d5f76b471042b5647355e0ab7391a8bf11e8f1282f43f9e09ffb9db

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jy6lnmm5l53li4iefnleonk6bk3tsgul6epi6euc6q7z4cp7xhnq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260222-r74c3aav3a/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.