MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c
SHA3-384 hash:	37cdf3194a11a814e4c491e48abef67fa17fe6a62ae791db5f5b7f3d64deb99d92f65c8ed7caed06a61d408a1dabf500
SHA1 hash:	20839bc70c495b8fe4944bab2c65b9f833d8197d
MD5 hash:	9b5d6a9c6503e5dddf2ef5cdfeb90e00
humanhash:	robert-louisiana-cup-maine
File name:	xans.spc
Download:	download sample
File size:	13'337 bytes
First seen:	2025-12-27 13:00:43 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:Yf87VpVJuJO26U/7DUf0CNFo+ybnEvq90v42xPZ:u87VpHCOeYFoNEvq9/AZ
TLSH	T13A52E801D93CBB33E6F0E277117BC792B2E14A8C2750964D7D594E2EBF25130069B6BA
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

70

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade mirai

Link:

https://www.filescan.io/uploads/694fd8a0e126b9ff439322f7/reports/2bfdc9ed-aba0-4c1d-9f10-1a2feee4a5e3/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2025-12-27T12:27:00Z UTC

Last seen:

2025-12-27T12:44:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5d4c2400-26d1-448a-bdd9-8c15bbe98e2a

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/9eda19eb-615e-4e1d-9105-8c26dc53fa8b

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1840289

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-27 13:01:22 UTC

File Type:

ELF32 Big (Exe)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kubqd4l4j45rips3utvaconjy7cy73wut4zrjztnup4wowbn3b6a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/251227-p9c8jsypck/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/f5141e16-f8d0-444b-b08a-25bd55c8462a

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/550301f17c4f3b143e5ba4ea0139a9c7c58feed49f3314e66da3f967582dd87c