MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 36c5a90261c99ac56496093c571a971ed24b5c13b1983c19df4eb90eca0875be. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	36c5a90261c99ac56496093c571a971ed24b5c13b1983c19df4eb90eca0875be
SHA3-384 hash:	c3d1c6239d0b4903aff45cd8b1cbe84b9d60b3d7b17359d8ef06017d9a88e843acc0afff56dbee770abc75952d0b1e46
SHA1 hash:	19ee45ce76bb8844d77136318110e4eeb0c7caa4
MD5 hash:	81efb74087dd8b78c0736d85727f2f19
humanhash:	pip-alaska-ten-dakota
File name:	Mozi.a
Download:	download sample
File size:	12'960 bytes
First seen:	2021-06-10 03:02:16 UTC
Last seen:	2026-10-02 11:15:26 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	192:fTu2PzRurki7SLDLVpVovt9SbVySN6TQ3JuGpymy/qD1zIWRzYFbYWvpK9pGrM:flzEBkDOvTCZuQEkymy/Gf+3pK9pGrM
TLSH	2E42BFC8BA45EAA5F7549DF27C2C41BC869BF6AF0A76307088D5B84DC6058AB1D0E3C5
Reporter	tolisec

Intelligence

---

File Origin

# of uploads :

8

# of downloads :

97

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Backdoor.Linux.fnqr.9692.6163.UNOFFICIAL

Alert

Create hunting rule

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

mips

Packer:

custom

Botnet:

125.44.52.138:42189

Number of open files:

0

Number of processes launched:

1

Processes remaning?

false

Full report:

https://elfdigest.com/brief/36c5a90261c99ac56496093c571a971ed24b5c13b1983c19df4eb90eca0875be

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/36c5a90261c99ac56496093c571a971ed24b5c13b1983c19df4eb90eca0875be/

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

linux

Link:

https://tria.ge/reports/210610-8521gxbe1a/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.20

Link:

https://yomi.yoroi.company/submissions/36c5a90261c99ac56496093c571a971ed24b5c13b1983c19df4eb90eca0875be