MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4b078550c948c0f236ece640db588520ce2909bd19b5b03755dee89bd89eebc8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 4b078550c948c0f236ece640db588520ce2909bd19b5b03755dee89bd89eebc8 |
|---|---|
| SHA3-384 hash: | 72a7a15cdcf8fc00c31496ec3b111526a208a04d94d59d4d2804338c781bb89e32755f19834c0a5c7709f1506eb3b404 |
| SHA1 hash: | 397ee694c2b9696f28692e90f6cd5e7bdef918da |
| MD5 hash: | ee30309befbdc70919f40c8aa2156771 |
| humanhash: | colorado-harry-leopard-nitrogen |
| File name: | test-pe.exe |
| Download: | download sample |
| File size: | 1'005 bytes |
| First seen: | 2026-07-31 11:56:00 UTC |
| Last seen: | Never |
| File type: | elf |
| MIME type: | application/x-sharedlib |
| ssdeep | 12:Bv7mb04kM00aXEXH/gkeXEX6s/uXTV0XaIsXMiqkafJ4Hv:RmbrkX03/gk+EJwTVnIk3UmP |
| TLSH | T1AB112483E7D54DA2CDA8A178D8D30B74B33BD0A46383CB230D2083303C133829D22802 |
| TrID | 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1) |
| Magika | elf |
| Reporter | Anonymous |
| Tags: | elf exe |
Intelligence
File Origin
# of uploads :
1
# of downloads :
11
Origin country :
UAVendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
0/10
Confidence:
100%
Tags:
masquerade
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
x86
Packer:
UPX
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Status:
terminated
Behavior Graph:
Verdict:
Unknown
Score:
99%
Verdict:
Malware
File Type:
ELF
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
elf 4b078550c948c0f236ece640db588520ce2909bd19b5b03755dee89bd89eebc8
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.