MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7032c0c5757ec11ade97b14fa59169f9593afb49d6f6f1469c388c3642a5f165. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7032c0c5757ec11ade97b14fa59169f9593afb49d6f6f1469c388c3642a5f165
SHA3-384 hash:	a822f2fe6beede1649b8d0b708914f52b7c3d3fcab3f7278c7142d1380092d8f697fb6fd1677ccbd3d0e6cbd73a8b1ab
SHA1 hash:	e080c5e15b61158f1bf3ffb75b78a7bb0468cac3
MD5 hash:	88001c6b7c389a06da829f4ccf5a467e
humanhash:	nebraska-beer-fish-july
File name:	na
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	149'030 bytes
First seen:	2026-02-06 10:27:41 UTC
Last seen:	2026-02-06 11:26:44 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	3072:qa3z5a9yc6DpEBcsAG1K5MLIIBl7k2Pp2/KTeCaI1Rl6:qqm10gAGs50Nkn/KTxl6
TLSH	T1FAE30286DE52D2F2E54341360086A76FDB78DD254448CAF6EB8CBF30F9E0782556B0AD
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

52

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Siggen.11341.23831.3927.UNOFFICIAL

Alert

Create hunting rule

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/62979bcf-d7ae-46b7-9277-f57ff2bc10ec

Intezer Gafgyt

Malware family:

Gafgyt

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/d0f250b4-404c-4da5-8d6c-a7bf72f81ba0

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1864608

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/7032c0c5757ec11ade97b14fa59169f9593afb49d6f6f1469c388c3642a5f165

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7032c0c5757ec11ade97b14fa59169f9593afb49d6f6f1469c388c3642a5f165/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-02-06 10:28:38 UTC

File Type:

ELF32 Little (SO)

AV detection:

7 of 36 (19.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=oazmbrlvp3arvxuxwfh2lelj7fmtv62j233pcru4hcgdmqvf6fsq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

credential_access defense_evasion discovery linux

Link:

https://tria.ge/reports/260206-mhrwhshs6c/

Behaviour

Reads runtime system information

Changes its process name

Reads process memory

Enumerates running processes

Deletes Audit logs

Deletes journal logs

Deletes system logs

Traces itself

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.