MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904
SHA3-384 hash:	5037c18048ce286276e5b3511401d86fefc04a32e0ac3c8df73eaa3b0e1d78a1f3af7529e81931a3e732180772abc7aa
SHA1 hash:	8f54c9d8882545b2d80c553ede7227e6866a9ebd
MD5 hash:	7b7abe4aef23dffe334e229e5c025deb
humanhash:	may-ack-tango-cat
File name:	rondo.mips
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	159'148 bytes
First seen:	2025-12-24 23:52:04 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:FXekiaveCIoOC0r5waikF8hYZs/g3ideelbB014wzmCPl5B8TbDAtgIR5boIlgqM:F3vedCPmRkYsigIR5boapR7VjTcrAGu+
TLSH	T134F3D80D6E224F7DF2B8873847B74F34A69D63DA12E1C685E1BCE1052E6024D257FB68
telfhash	t1aa21a1284d7817e4b2296c5d195ceb76d2a335df3e166c238911d81eeb69b838d21c0c
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

74

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/694c7cb03f8fdbf8e9517c68/reports/43c33d51-e569-4e40-a8fe-31238acf64e6/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2025-12-24T21:42:00Z UTC

Last seen:

2025-12-24T21:48:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/7d063e9d-a90b-4395-b9c2-c208b8114761

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/cef6af08-ebde-444f-92f9-b7828dafa7f9

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1839116

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904/

ReversingLabs TitaniumCloud Linux.Backdoor.Gafgyt

Threat name:

Linux.Backdoor.Gafgyt

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-24 23:52:16 UTC

File Type:

ELF32 Big (Exe)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cfine6rptyn4jpl6cah6mq3kcmmdk6ldw2y3ewzydalop4j6heca._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/251224-3wzfhs1pes/

Behaviour

System Network Configuration Discovery

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/b288c91c-5c76-4aa4-9cdd-4e1ffa35fee7

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1150d27a2f9e1bc4bd7e100fe6436a1318357963b6b1b25b381816e7f13e3904