MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e06d6e5b8457a293a75bacdbfa6ae55874f74562ad27e25d69f0f509b7f8641c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e06d6e5b8457a293a75bacdbfa6ae55874f74562ad27e25d69f0f509b7f8641c
SHA3-384 hash:	7c2554e6305b55024406b3abc01fee8acfc9b7c46f53de674f5807801157dcdd3ba9648ddcde534f3822255cc43003fd
SHA1 hash:	8bb8a4ac3b1dd52a6115d1d4af27e21445c5b34e
MD5 hash:	254d437c9f55fba8531a86d5c0301123
humanhash:	harry-oranges-monkey-gee
File name:	c.sh
Download:	download sample
File size:	778 bytes
First seen:	2026-01-20 19:14:10 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:3J3mKXMUYNI7KQfKX2DxssuDku7+tBWssJZszHR:J8k/fFDcUaIzx
TLSH	T10B01DEAD22D5A187DA0C8F58F16A827C6BCACAD4F0741DD5F1548C70A9DE610306DB7A
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

24

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/c1ea4d8b-b9e2-4af0-b0ef-10175c56d4a0

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e06d6e5b8457a293a75bacdbfa6ae55874f74562ad27e25d69f0f509b7f8641c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e06d6e5b8457a293a75bacdbfa6ae55874f74562ad27e25d69f0f509b7f8641c/

Neiki Trojan-Downloader.Shell.Agent

Verdict:

Malicious

Threat:

Trojan-Downloader.Shell.Agent

Link:

https://tip.neiki.dev/file/e06d6e5b8457a293a75bacdbfa6ae55874f74562ad27e25d69f0f509b7f8641c

ReversingLabs TitaniumCloud Linux.Trojan.Alevaul

Threat name:

Linux.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-01-20 15:41:49 UTC

File Type:

Text (Shell)

AV detection:

13 of 36 (36.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4bww4w4ek6rjhj23vtn7u2xflb2porlcvut6exlj6d2qtn7ymqoa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260120-xx4hzagw9h/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.