MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd
SHA3-384 hash:	e6924a0d3b70971bc20347ee7784773e0dca83ffb62f4fd22f1522e74cf1e551e9161e3a5fc51703a3a39828c92664d2
SHA1 hash:	38d08f7ee8122630570f22ffeff6e143e2073d72
MD5 hash:	82dd39a0c280d2c3c7d45459168db230
humanhash:	eleven-glucose-salami-magazine
File name:	bizy.mipss
Download:	download sample
File size:	1'221'959 bytes
First seen:	2026-02-14 15:34:08 UTC
Last seen:	2026-02-14 16:21:50 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:RzOnel5KDZdILKFKxcKJ1ayxqFz3bhAGc0iYdUTdH9NydY46jxhnyad:R9XKNdI+FKTxqd3bhg0iYIddNydYkad
TLSH	T16845332B2523DA3997DC58E2A7DCD26A1065FF8B884DD79A30A0C041FB5722D610D7DF
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

48

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/699095fa930564ff3ca10980/reports/bbd4e082-0b86-4a27-9e35-b071395602f8/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

mips

Packer:

custom

Botnet:

unknown

Number of open files:

0

Number of processes launched:

1

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5a05dfb3-030b-4374-97c3-c3e9720d6a4e

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/331f4088-66a9-41e4-a9ea-8e61129a7619

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1869536

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=npi7g42is3xdpmtkqoh4yigfvgiv6wh7towutko6xp7fuqvzrdgq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

discovery upx

Link:

https://tria.ge/reports/260214-szw5fsas4d/

Behaviour

System Network Configuration Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.