MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858
SHA3-384 hash: 6db194d01d5fc43c4dc54da523ce2cd338d419b60fddd41d3481611f2da44926396983adf297103b58bb28acb93d36a8
SHA1 hash: ead760438607010d092c9666f43273690d07ad77
MD5 hash: 0afc3604b0d291e0358fdbc8ad6ca710
humanhash: robin-enemy-blue-speaker
File name:bot
Download: download sample
File size:464'541 bytes
First seen:2026-01-05 19:39:21 UTC
Last seen:Never
File type: elf
MIME type:application/x-sharedlib
ssdeep 12288:T6GdkHxx6jLsVSv/6IPHs811nohBBrLXa2s0U1jSAm22Rq4ZeT:HkHn6jLIo/HPHsYmjrLXa2s51jRYRhZo
TLSH T1FDA423F850B798B5E72753AEA80B52B59B8DB240F3181F795AB405112B36C3B0C9CD6F
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
1
# of downloads :
33
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/695c13a36c350eb0b6f4e54d/reports/1936400e-ed92-4044-9744-7e005aee83f0/overview
Verdict:
Unknown
File Type:
elf.64.le
Link:
https://opentip.kaspersky.com/1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/8e7f94ce-461e-426c-a5f6-e2ef150253e8
Behavior Graph:
Download SVG
%3 guuid=ec228b16-1800-0000-a507-6c9b120d0000 pid=3346 /usr/bin/sudo guuid=1e978419-1800-0000-a507-6c9b1a0d0000 pid=3354 /tmp/sample.bin guuid=ec228b16-1800-0000-a507-6c9b120d0000 pid=3346->guuid=1e978419-1800-0000-a507-6c9b1a0d0000 pid=3354 execve
Verdict:
Suspicious
Link:
https://analyze.intezer.com/analyses/80526001-4209-457f-bdcf-c84b516c6e22
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Link:
https://www.joesandbox.com/analysis/1845084
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858/
Threat name:
Linux.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-01-05 19:40:22 UTC
File Type:
ELF64 Little (SO)
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=djgitgvuns2zhsycciq7zu67gwhrirwfwnpowbxc2qakazicpbma._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260105-ydbjhsvjdq/
Verdict:
Unknown
Tags:
n/a
YARA:
n/a
Link:
https://app.threat.zone/submission/ca719dd7-489b-472c-a809-5e2f1f1e0fd7
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 1a4c899ab46cb593cb021221fcd3df358f1446c5b35eeb06e2d400a065027858

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3734892/
  
Delivery method
Distributed via web download

Comments