MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac
SHA3-384 hash: caa3b7cfd8861232a24e7e169a9d347e0bb04e80fda41be7c103efdb0219bb6c46fa18ce6f97917c12a823d0e78c0b91
SHA1 hash: e92242497cfb90388ae9379be22d94236fbba75b
MD5 hash: d70b30d428192fd6d4cee5da7ee4b8a4
humanhash: wisconsin-skylark-blue-coffee
File name:z.sh
Download: download sample
File size:1'678 bytes
First seen:2026-06-15 12:33:45 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 24:/VBe9e809c71L3O6V5OzBOK73OpVqFlcBe9e8H:dfQ1jO6V5OzBOY3OpVqFOk
TLSH T1F13123DE21610E327CAB5D2271B5C6A475C8A09BE4DA2F2594DC7EE5D0CDF042241BE7
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter adliwahid

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
NL NL
Vendor Threat Intelligence
No detections
Detection(s):
Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
File Type:
unix shell
First seen:
2026-06-12T04:05:00Z UTC
Last seen:
2026-06-15T11:44:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Downloader.Shell.Agent.p HEUR:Trojan-Downloader.Shell.Agent.gen HEUR:Trojan-Downloader.Shell.Agent.a
Link:
https://opentip.kaspersky.com/c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/5c7bf38f-8a86-479f-8ce5-6da2457d361b
Behavior Graph:
Download SVG
%3
Score:
100%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac/
Verdict:
Malicious
Threat:
Trojan-Downloader.Shell.Agent
Link:
https://tip.neiki.dev/file/c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac
Threat name:
Linux.Downloader.Medusa
Create hunting rule
Status:
Malicious
First seen:
2026-06-12 11:40:43 UTC
File Type:
Text (Shell)
AV detection:
20 of 36 (55.56%)
Threat level:
  3/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=yx3ublrbe7657o3eyzpk4k5ywa267osubdgvdogcwg373jamdkwa._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260615-pr2s7adx8r/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/c5f740ae2127fddfbb64c65eae2bb8b035efba5408cd51b8c2b1b7fda40c1aac

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments