MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f87a070d32159ffbc1786696bbe2a8043c2ce894a8e5fadba25bae82e5c5a2a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3f87a070d32159ffbc1786696bbe2a8043c2ce894a8e5fadba25bae82e5c5a2a
SHA3-384 hash:	9b86e19b912fef23506cb3f0b82c23fe01ef873ace1f3fbeac1de3447a67954c915f7916ad7ebc9981de1f36ca29ac0b
SHA1 hash:	1494accc5463f35be2d3bf170343c48f00277c25
MD5 hash:	b67c130fab6e6750a3a9e809eeb3e8fd
humanhash:	eighteen-eight-virginia-south
File name:	bizy.arm6
Download:	download sample
File size:	1'242'003 bytes
First seen:	2026-01-16 12:24:02 UTC
Last seen:	2026-01-17 10:10:31 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:VC3SCD5aVjKXpb9KyHK7nIgJtTpYIHzpquVF2TFl2w4rnglV6xluy9:VTCNmjK5bBKLIgJtTWWz48F25l2w4rnP
TLSH	T13D45338CB8DF7C62EAFB88DEF34922850743FC4DC5598CE311226A717266E787E16119
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/696a2df93dd9d20950571099/reports/8f74f928-636d-4617-bbbd-725db4ea3f0b/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/72cdfaf3-93b9-4aa5-ab2d-cfc19da92196

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/06bf2024-9fb0-4967-a342-cf190ff700ef

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1851971

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/3f87a070d32159ffbc1786696bbe2a8043c2ce894a8e5fadba25bae82e5c5a2a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3f87a070d32159ffbc1786696bbe2a8043c2ce894a8e5fadba25bae82e5c5a2a/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-16 12:24:40 UTC

File Type:

ELF32 Little (Exe)

AV detection:

5 of 36 (13.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=h6d2a4gtefm77paxqzuwxprkqbb4ftujjkhf7ln2ew5oqls4liva._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

upx

Link:

https://tria.ge/reports/260116-pk89pagw2b/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/25f64923-1c51-48b5-aa2f-7dbd43607f5f

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3f87a070d32159ffbc1786696bbe2a8043c2ce894a8e5fadba25bae82e5c5a2a