MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8
SHA3-384 hash:	4ca9aab18b3760e29f6c1bf69240e7b89a55dbe46ac3d7b4339fbb90ad4fea3ff560f0b08d1301e1eb3a591146388a29
SHA1 hash:	83cbb9276b8254ce1c3303befad5e1b8e5c6df2c
MD5 hash:	ed712c1c3f5d33117e791f98ec1ae553
humanhash:	bacon-zulu-wyoming-lake
File name:	na
Download:	download sample
File size:	186'166 bytes
First seen:	2026-02-18 06:15:38 UTC
Last seen:	2026-02-18 07:25:48 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	3072:ozdurayQy5HEcMf3oW3ybv6YJLPK6AeIGfGvXZojCv0enfwl71iXEiyP8wpml:ozdurafekcMwW3ybv6aAQ+pGY0eno5UR
TLSH	T14E04F100FB580473E0C25EB44E3B1772973D499204B5E62C6A06FB6A1D63A37978BBC9
Magika	unknown
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

54

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Siggen.11415.22095.18426.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

Link:

https://opentip.kaspersky.com/0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/126afa42-8879-45a9-9723-6e81c1263070

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/649604d0-fd75-4e5b-a853-51f0f9cdf2d6

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

evad

Score:

21 / 100

Link:

https://www.joesandbox.com/analysis/1870910

Signature

Spawns processes using file descriptor names (likely to hide the executable path or fileless malware)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-18 07:10:58 UTC

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=b4kwshqhlbcgn24t4sa26gvg6ha5umgi63qk5ipyjn7fdhag3oua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260218-g1jd7saw6b/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0f15691e07584466eb93e481af1aa6f1c1da30c8f6e0aea1f84b7e519c06dba8