MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7
SHA3-384 hash:	099c4495931d5dbec9d6c80b97c1c72221bea4df34acfae86387c527b80049d14bf6722f150113da8e467c5750ca4f88
SHA1 hash:	d8f9ee9fb0115208553ae07b51016b0a04a8d036
MD5 hash:	7b79f1f962860ddc02ef695fb602a9c3
humanhash:	grey-lithium-dakota-july
File name:	busybox.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'659 bytes
First seen:	2025-08-06 12:18:11 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:MNNkhjwNkMlHDjTm3LoaZyDa9bQN9NUD9nONkcZmrTNeV1lGN08:MTDllHvTOLocye9bQH+ZOxeTay/
TLSH	T10F31CDCB172002350191BF87BE76EFDD300B54D93B678BA99A5D503CB188E39E8D6748
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

38

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive obfuscated

Link:

https://www.filescan.io/uploads/68934817397fd3ce6f9f2668/reports/51ea3e4f-7f8b-490f-b122-fe5d00f95ec2/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/b8dc8ed7-e1a6-4261-9f4c-2dac74608a1c

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7/

Neiki HEUR:Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

HEUR:Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7

ReversingLabs TitaniumCloud Linux.Downloader.ShellAgnt

Threat name:

Linux.Downloader.ShellAgnt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-08-06 12:20:05 UTC

File Type:

Text (Shell)

AV detection:

9 of 38 (23.68%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2efb5bnhbgctyun6mubmz26ndftn4lpc4mubhafmvdw26uyb32tq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250806-pgqyyawwbz/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d10a1e85a709853c51be6502ccebcd1966de2de2e3281380aca8edaf5301dea7