MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595
SHA3-384 hash: d738d07831541f0abc1c2b1aaede86789bf5bccd69bd48ed5dbf4ab660e3232570c97c781a38c4d47123bbc9b9770563
SHA1 hash: 34b3ecc56a41c8767a367136be858f3b0f8d2693
MD5 hash: 8d0ca9522f816adf80a2a04384e13c28
humanhash: uniform-zebra-vermont-helium
File name:Mozi.a
Download: download sample
File size:99'360 bytes
First seen:2021-06-21 23:02:01 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 3072:T2s/ITo7WCkybotgsJ913DhrbW4UYSx7QpUiBZ:T2s/gAWuboqsJ9xcJxspJBZ
TLSH B6A3189ABC919A5545D413BBBE7E818E330723B4D2DF7113DD041F18B6CA94F0E7AA82
Reporter tolisec

Intelligence

File Origin
# of uploads :
1
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
not-packed
Botnet:
115.55.149.62:42295
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Full report:
https://elfdigest.com/brief/466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595
Result
Verdict:
MALICIOUS
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/db5c4e01-b03d-4187-bd30-72d71ece75f7
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595/
Threat name:
Linux.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-11-08 02:02:05 UTC
AV detection:
13 of 45 (28.89%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/210621-nxj4tlckws/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.20
Link:
https://yomi.yoroi.company/submissions/466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 466bdf0a15a92a8951e9288900bddc865bf27ba95b9fdc8fa3654e41d267b595

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/1384939/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/1386496/

Comments