MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 50ea860716aca388657dea1cdfcc1a141c4b76aacd71e77bcd8a36705b7f6b93. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 50ea860716aca388657dea1cdfcc1a141c4b76aacd71e77bcd8a36705b7f6b93
SHA3-384 hash: b5856ef3ff08d78ded891b123d83654a8da6a7b293b53d617f0267f46e23b197e815560fe39bc84bd8aa9b689c5a0e6d
SHA1 hash: 1d9ff73c68b112f2a8733c026429d5347e7cd4b9
MD5 hash: 243963e3019f679b685ea757b3d07142
humanhash: oxygen-whiskey-papa-texas
File name:xnxnxnxnxnxnxnxnmicroblazexnxn
Download: download sample
File size:43'175 bytes
First seen:2026-02-12 01:16:40 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:tyJO54ezfTy5AD51dc49ZIZYXw3/NYGp1KQ1inTSdrxkUbwYGopb:IJ7ezLD51dcCzgNYGpF9xkib
TLSH T111139211FF4967B4CC630930A79A2A5A6E3B104A7EFB59216E1B823DCD13C109B35F4D
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
1
# of downloads :
91
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
gafgyt
Result
Gathering data
Status:
terminated
Behavior Graph:
%3 guuid=2511b519-1700-0000-901c-c9ce040e0000 pid=3588 /usr/bin/sudo guuid=8769491c-1700-0000-901c-c9ce0b0e0000 pid=3595 /tmp/sample.bin guuid=2511b519-1700-0000-901c-c9ce040e0000 pid=3588->guuid=8769491c-1700-0000-901c-c9ce0b0e0000 pid=3595 execve
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
0 / 100
Behaviour
Behavior Graph:
n/a
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 50ea860716aca388657dea1cdfcc1a141c4b76aacd71e77bcd8a36705b7f6b93

(this sample)

  
Delivery method
Distributed via web download

Comments