MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e5229afad3bea719d50865d43ac0fa8268946fa7dc06143de8b8cc46eaab38d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e5229afad3bea719d50865d43ac0fa8268946fa7dc06143de8b8cc46eaab38d9
SHA3-384 hash:	1e725360b1607f78bf8b116c25fe1b034ea11b2371164c027b75562d1b7c49c83161d5aaa673cb7a7488686bb46fb511
SHA1 hash:	5c6ee0e46e2e2b30230fc2412f6c35420593094c
MD5 hash:	c7b748fb18bce665ba072138a0a1a05a
humanhash:	lactose-video-sink-lion
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	706 bytes
First seen:	2025-06-26 09:01:39 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3FuI5FbL4eC5FxNIl5K5Fif0LKcC5FSgOy5FV9C5Foa95FkSK5FFtM5FUM5FHN:3J30IbLlCxNI7KBKBSgzVEoa9kVFtMU8
TLSH	T13D01F4DCA4B597E31608CE08F16F826C7406C8C0A2E08EF9EDD81939A8DCF00303576A
Magika	txt
Reporter	abuse_ch
Tags:	mirai sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

80

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=685d0ca832ed47a3a8d76967linux22vpnfull_triage

Tags:

trojan agent hype

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/ec44bbd3-78ad-492b-9307-899d0682b7a6

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e5229afad3bea719d50865d43ac0fa8268946fa7dc06143de8b8cc46eaab38d9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e5229afad3bea719d50865d43ac0fa8268946fa7dc06143de8b8cc46eaab38d9/

ReversingLabs TitaniumCloud Linux.Trojan.Egairtigado

Threat name:

Linux.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-26 09:02:26 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4urjv6wtx2trtviimxkdvqh2qjuji35h3qdbippixdgen2vlhdmq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250626-kzm8jssqx8/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/e5229afad3bea719d50865d43ac0fa8268946fa7dc06143de8b8cc46eaab38d9