MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a
SHA3-384 hash:	2d55559abddb580f1d648b484e654e859f1f2bec91339d12ef1b83020cbd676b58c9de7b9fb936060b6227bb5c63d98f
SHA1 hash:	23f708ad790779e88c8e94e15534bd1f88e6eedb
MD5 hash:	e6714daccdb6192d2158c95ac1879e87
humanhash:	november-salami-music-berlin
File name:	bizy.arm6
Download:	download sample
File size:	1'096'263 bytes
First seen:	2026-01-01 13:16:09 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:VC3SCD5aVjKXpb9KyHK7nIgJtTpYIHzpquVF2TFl2w4rnglV6U:VTCNmjK5bBKLIgJtTWWz48F25l2w4rnU
TLSH	T1EB35238CF8CF7C52EAEF88DEE34913894703EC5DC95498E311236A71A122F78BE26555
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

27

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6956739f2fb7bb52ca840ec3/reports/c16831cd-7682-4ebc-acc2-15477be9f12d/overview

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

elf.32.le

Link:

https://opentip.kaspersky.com/09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6142a4cf-d4ed-4053-ab0b-eee31cbd8637

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/f1418952-760c-44c7-9c4f-4faf2c7a8d95

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1843119

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-01 13:17:14 UTC

File Type:

ELF32 Little (Exe)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bh3nmszhkceaej5jyjrcm6krt4fk37xsnqkyvtsdwvcetcwfzjva._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

upx

Link:

https://tria.ge/reports/260101-qhz4nsfr91/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/c0d84b30-bf71-4cbe-a3a0-f668d6b81e0a

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/09f6d64b2750880227a9c2622679519f0aadfef26c158ace43b544498ac5ca6a