MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b
SHA3-384 hash:	1fcb52e26bc4bafe1da0cbe89217d84bce1ff5574d23046c20e9e669df0a58cb58bfa135076f02020815e1d7a61034fe
SHA1 hash:	e18e989b89d92fb74864933eb06914fd62808585
MD5 hash:	a07b9a4bf7ada69a2665f8362ec16215
humanhash:	island-queen-north-echo
File name:	bizy.mpsls
Download:	download sample
File size:	1'064'271 bytes
First seen:	2026-02-15 13:47:23 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:eWN5Ba1c/XeF1CLTyGbR+iFkVvE9PyGN93yer3sZ/3S7dYNBgdDd:FNfel2wifAGbiHGdCeDd
TLSH	T1DB3533712707C7728EB1A735B8C4D8445EB94239317936C2D5702DE0F7ABAB8E7186E2
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

50

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6991ce9d2ffccda09770298a/reports/45e843a0-f094-4864-8886-2cb17e3da5ce/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

mips

Packer:

custom

Botnet:

unknown

Number of open files:

7

Number of processes launched:

1

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.le

Link:

https://opentip.kaspersky.com/72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5db248d4-e9ba-486a-a2a9-b5eb6ef14f5b

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/93cbafcc-dfec-456c-bc04-375f6c7c4359

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1869643

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-15 14:10:33 UTC

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=olmkth24i5j3hfarlgsulo6u4wqjckizxg4ctn4rv5qxock7frvq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

upx

Link:

https://tria.ge/reports/260215-q37dgsex6h/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/72d8a99f5c4753b3941159a545bbd4e5a0912919b9b829b791af6177095f2c6b