MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626
SHA3-384 hash:	5068f3ba9750bbcb2b195c7aaa4cb683d53a8cb092dafd333388b4f89c9b2b6dce9e0a2f780e26918c56627d3dea6c1e
SHA1 hash:	4855c712df1e74c25d1f518f48ce7b1f9d25c5d7
MD5 hash:	5d65f901163a09315d091e7dc194785b
humanhash:	uniform-orange-black-hot
File name:	telnet.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'379 bytes
First seen:	2026-01-04 08:01:30 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:ZxyBLBnBw0BNw8BhvsoBH3Bm78BD20Bkm13BgK3BjP3B2o3BZi:Zw1Bw41hzRKQDR9rxlpI
TLSH	T1D52182D851F455B7DAC8AD09B1B6C79D504EC8C73EE394E1E8DC08A2EB83090F5E671A
TrID	70.0% (.SH) Linux/UNIX shell script (7000/1) 30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

37

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox mirai

Link:

https://www.filescan.io/uploads/695a1e85127d6a14e0cefafd/reports/268e5c9c-3efa-441c-a6a7-af6fadd8b39d/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

unix shell

First seen:

2026-01-04T03:37:00Z UTC

Last seen:

2026-01-04T06:05:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/a0a3bdff-f47f-474c-bb1a-d326f2951c4f

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/73406d8eadcbde8f10aec314da9b3db03e2ca249f7762a4425ceda5462097626

ReversingLabs TitaniumCloud Document-HTML.Hacktool.Heuristic

Threat name:

Document-HTML.Hacktool.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-01-04 06:02:47 UTC

File Type:

Text (Shell)

AV detection:

10 of 38 (26.32%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=onag3dvnzppi6efoymknvgz5wa7czisj653curbfz3nfiyqjoyta._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/260104-jwydnsxrgj/

Behaviour

System Network Configuration Discovery

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.