MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 77d7e32724dbd0db299186f3198410b87b698eff56ed3b0a76f38f7db4d3607d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	77d7e32724dbd0db299186f3198410b87b698eff56ed3b0a76f38f7db4d3607d
SHA3-384 hash:	7ebf41b76b1b829b571c53f065c6c6e51858ba59394e727cbb9be2056e08f14ff42bf2d08c44d69f98ac6f7b9e00ca36
SHA1 hash:	ba954902be46fe24166ef83b1a0ee3499f981abd
MD5 hash:	eba0eb7c5ea61fdf873f2fbe8b3836bb
humanhash:	mockingbird-wisconsin-utah-august
File name:	ub8ehJSePAfc9FYqZIT6.sh4
Download:	download sample
File size:	23'855 bytes
First seen:	2026-01-10 13:08:59 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:z6LTKmhf/O3y+J6UzTzLcD5Diiz2N7/Ig4D8CsIH8NzPB1N87Neceyg2UD9DlbfG:uLWmF/GlsUzPID5DiJ7/IWwteygFLrmZ
TLSH	T1DAB27D3689458EC4C8A50674EDB894BC4B02F505E3632DB70FD98BA9105FAB8F85A773
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

66

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Unix.Trojan.Generic-9910198-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade mirai

Link:

https://www.filescan.io/uploads/69624f91d1d688e1d664aec8/reports/8452b238-1726-4436-ad5a-de835ea35165/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.le

First seen:

2026-01-10T15:17:00Z UTC

Last seen:

2026-01-10T16:06:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/77d7e32724dbd0db299186f3198410b87b698eff56ed3b0a76f38f7db4d3607d/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/f09108b7-5a93-404a-be20-1849a818c2f7

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/b5bbe77f-8f70-4cc6-88a0-b55ea8449e35

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1847900

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/77d7e32724dbd0db299186f3198410b87b698eff56ed3b0a76f38f7db4d3607d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/77d7e32724dbd0db299186f3198410b87b698eff56ed3b0a76f38f7db4d3607d/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-10 13:09:39 UTC

File Type:

ELF32 Little (Exe)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=o7l6gjze3pinwkmrq3zrtbaqxb5wtdx7k3wtwctw6ohx3ngtmb6q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260110-qd4w3aht3b/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Generic-9910198-0

YARA:

n/a

Link:

https://app.threat.zone/submission/70a190ec-eaf2-4a87-bef5-43fad3b834d8

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.