MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0
SHA3-384 hash: 6d5eadd076e32ecae2cf5891360ca3e6b40c810dcc534768b18f06abb91cd256658d93fa197598d16a0b06f110b2d6be
SHA1 hash: 02df7de753bbdd67c12a1138633300594cc210e8
MD5 hash: ac8a5498c8762095b468f5b7cbcde7ea
humanhash: gee-kentucky-hamper-uniform
File name:2016Nwjppc
Download: download sample
File size:101'096 bytes
First seen:2026-01-27 18:34:50 UTC
Last seen:2026-01-27 21:50:32 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:vUVkLEd1rVsQdHxcmfw2d4bvadf/V2G4KlguQCWl5FAK3aFji2ez2tRvAo29MIc:vOWE7KQ9xc+mcfdTeAK3GieQoH
TLSH T1F3A34B05B70C0D47D2233EF4373F2BE1D3EF9A9121A8E644251FAA899271D325586DDE
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
2
# of downloads :
87
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Detection(s):
Unix.Trojan.Mirai-10012200-0
Create hunting rule

Unix.Trojan.Mirai-10012671-0
Create hunting rule

Result
Gathering data
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/7f39ee31-b06b-4752-9626-7f022db28862
Behavior Graph:
Download SVG
%3 guuid=f8499099-1900-0000-e4ef-dc43e50a0000 pid=2789 /usr/bin/sudo guuid=dbaeab9b-1900-0000-e4ef-dc43ec0a0000 pid=2796 /tmp/sample.bin guuid=f8499099-1900-0000-e4ef-dc43e50a0000 pid=2789->guuid=dbaeab9b-1900-0000-e4ef-dc43ec0a0000 pid=2796 execve
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/4c2995c5-e37d-4db7-94a7-970fe731d5ba
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Link:
https://www.joesandbox.com/analysis/1858542
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=lnmcyp7mfpofs7jsrjqqoc72elgnqwr6ujiejhud2nhb3ctd3xia._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/260127-w8la4abz2b/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 5b582c3fec2bdc597d328a61070bfa22ccd85a3ea250449e83d34e1d8a63ddd0

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3758114/
  
Delivery method
Distributed via web download

Comments