MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685
SHA3-384 hash: 6ea9847dccaeec25a8a19894f81fd7b445d3e688b5637b9e18c120e24d2f0785c0ff0cbc429c1b92cd7d0bca60ee3b3f
SHA1 hash: 90474178a4a140b776147af035661ecadef091a2
MD5 hash: b2a65b1edb2505fcd28bf32220122ffe
humanhash: alpha-massachusetts-hot-apart
File name:dlr.x86
Download: download sample
File size:8'420 bytes
First seen:2026-02-20 16:33:37 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 24:FlNnEMKnOE7ztnSSQNsBImBFkKk5q/LGLz+SPUxva/2PKra:fSl/7zVXQXEiNoznira
TLSH T100028909C361A827E1695534265E87369770A53522A44ACE77002FBA2CA7BCE0C28B27
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
1
# of downloads :
36
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
masquerade
Link:
https://www.filescan.io/uploads/69988d1597feb4afd64f1c74/reports/ee866acd-ac38-41ac-bc55-de42d2541ead/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
x86
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Verdict:
Unknown
File Type:
elf.32.le
Link:
https://opentip.kaspersky.com/65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/8e86620d-94c6-422d-9b05-5a2f517978d0
Behavior Graph:
Download SVG
%3 guuid=d67ebd91-1b00-0000-b55e-e5da70090000 pid=2416 /usr/bin/sudo guuid=2d7bea94-1b00-0000-b55e-e5da79090000 pid=2425 /tmp/sample.bin guuid=d67ebd91-1b00-0000-b55e-e5da70090000 pid=2416->guuid=2d7bea94-1b00-0000-b55e-e5da79090000 pid=2425 execve
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/56545cad-15e8-416d-8246-85f89b162c1c
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
2 / 100
Link:
https://www.joesandbox.com/analysis/1872603
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=mwykwongdkchwta5w3fphjhedbebrumfzmhlyi3w6io2m4wyc2cq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
linux
Link:
https://tria.ge/reports/260220-t29n1afv5d/
Behaviour
Writes file to tmp directory
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 65b0ab39a61a847b4c1db6caf3a4e4184818d185cb0ebc2376f21da672d81685

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3781862/
  
Delivery method
Distributed via web download

Comments