MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e
SHA3-384 hash:	584d4c74ea8849ce65926aa0d6a94a76e854c7428f5f0f5ca9d22a06e45134cf7ae9d5ad889937cd1ea68237aaddda82
SHA1 hash:	2fa1582896175ea60caaf97b3667a98a85095939
MD5 hash:	3b631883a67f62992d629c147eefe747
humanhash:	don-magnesium-washington-nuts
File name:	enc
Download:	download sample
File size:	16'952 bytes
First seen:	2026-09-28 05:39:48 UTC
Last seen:	2026-09-29 03:25:16 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	192:RziwsEhUMkc0PPuwVT1QdOr4bMMzSIvsvi/m:GEhUMkc0PGI58O44MPXm
TLSH	T1D072B74AE3E0CE3FCCAC4334845B863466B7D454D7B393272E142A721D837945EBAD95
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	BlinkzSec

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

63

Origin country :

SK

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.64.le

First seen:

2026-09-28T03:55:00Z UTC

Last seen:

2026-09-28T04:59:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/279df545-858f-43c8-8f83-1957bbcb6449

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/0bfa9b7a-0127-4538-a910-8aa0d6e589b3

Nucleon Malprob Susipicious

Score:

60%

Verdict:

Susipicious

File Type:

ELF

Link:

https://malprob.io/report/20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-28 05:23:14 UTC

File Type:

ELF64 Little (SO)

AV detection:

3 of 24 (12.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ecv3gxxspkvxduoilc43imvpkfwlpgnzkhwux7jpvonkm334gu7a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260928-gc3g6swcld/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/20abb35ef27aab71d1c858b9b432af516cb799b951ed4bfd2fab9aa66f7c353e