MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 94e5bd8ea9fe4e85b890e59c2d266d922a0f2f05a6f5616d29c2d8e6be45b43c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	94e5bd8ea9fe4e85b890e59c2d266d922a0f2f05a6f5616d29c2d8e6be45b43c
SHA3-384 hash:	c7a7b82a295be4775a9d9d1c6ede2bc7e4e4bc4b82ec30e1894b51f22aa3c5455087b62ac291270b58ca006f13484ac9
SHA1 hash:	1a6c7dba6e40d18a6d629e000edf4fa04aad1e84
MD5 hash:	5ede13fe3d552a6ab34b710ddd62b8c5
humanhash:	thirteen-orange-friend-oranges
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	862 bytes
First seen:	2025-05-11 17:07:29 UTC
Last seen:	2025-05-11 18:02:45 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3m0jQmiqQm6NIl5zAQmH0LKjQGMDOsQtCQn/QNuSEQdtaKAQPjQFJiAQFTfAUR:3J39YXNI71KSDux72tBIoHR
TLSH	T1E711BECD335DD3D2AE4C8E64B1AE858C66A0F1C0F6F54F19F31588709899501389DB76
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

121

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6820dacce16384d6a7038918linux22vpnfull_triage

Tags:

agent hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6820d97c8d43c3a878fa41ff/reports/71215ec2-626e-4859-86fb-54e7721a5423/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/94e5bd8ea9fe4e85b890e59c2d266d922a0f2f05a6f5616d29c2d8e6be45b43c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/94e5bd8ea9fe4e85b890e59c2d266d922a0f2f05a6f5616d29c2d8e6be45b43c/

ReversingLabs TitaniumCloud Linux.Trojan.Egairtigado

Threat name:

Linux.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-11 17:08:18 UTC

File Type:

Text (Shell)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=sts33dvj7zhiloeq4woc2jtnsiva6lyfu32wc3jjylmonpsfwq6a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250511-vnm4hs1ydv/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.