MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 304cf8764dfe0284d46446cc462e8f46d9820e2413b1ef9bc463a4f7a96d644c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 304cf8764dfe0284d46446cc462e8f46d9820e2413b1ef9bc463a4f7a96d644c
SHA3-384 hash: 791bf4549c03625ab545a58c6ddeb6ddc6f130ebc29f6c42b504840994ca51cc364e8f67992b19215ed507379024b944
SHA1 hash: 1af2aea968a47e2e4599c70beb18569eb92e0ced
MD5 hash: f83a923f757ee751c08c31c0dfe45037
humanhash: sink-nine-oregon-blue
File name:boatnet.mips
Download: download sample
File size:17'216 bytes
First seen:2026-01-28 16:19:47 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 384:4HO/yWWOQvaA4pv6oYB6Aa8mOdIDSLBsDP9F:4HyhWOg1006N8q+BszX
TLSH T1AB72D8A57B11EFA7C16DC23006F3C5965BD52E952AE1C089B220F71C1E3121D692FFE8
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
1
# of downloads :
61
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:

Behaviour
Connection attempt
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
gcc masquerade
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Gathering data
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2026-01-20T01:56:00Z UTC
Last seen:
2026-01-27T16:55:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=66933dd3-1900-0000-83ab-efc75b090000 pid=2395 /usr/bin/sudo guuid=cd604bd5-1900-0000-83ab-efc75c090000 pid=2396 /tmp/sample.bin guuid=66933dd3-1900-0000-83ab-efc75b090000 pid=2395->guuid=cd604bd5-1900-0000-83ab-efc75c090000 pid=2396 execve
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
2 / 100
Behaviour
Behavior Graph:
n/a
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 304cf8764dfe0284d46446cc462e8f46d9820e2413b1ef9bc463a4f7a96d644c

(this sample)

  
Delivery method
Distributed via web download

Comments