🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 860f4f19a0718cccc073d509d241ee6ab0ec1ae61ce6005b7e0b674e91bdfec4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 860f4f19a0718cccc073d509d241ee6ab0ec1ae61ce6005b7e0b674e91bdfec4
SHA3-384 hash: 951b212d9d28d97fe6eb4a0e07b098cef99e7c3c62f37dd732908fad6c45f25d867e694f03bf8a0560b92f6b6f5a1ab5
SHA1 hash: 24cb6a40dc5ce2677998cefb6004e9cb83580480
MD5 hash: eac87bf7fa6b34edd6ee036d54374ea0
humanhash: foxtrot-leopard-alabama-florida
File name:bot-mips
Download: download sample
File size:21'811'579 bytes
First seen:2026-10-14 07:48:23 UTC
Last seen:2026-10-16 04:24:26 UTC
File type: elf
MIME type:application/x-executable
ssdeep 393216:XLFJ+AmAw3Lml+gQ3MjbE/Nx5gDvNiVpo59E4rOJsm0w:XLFJ+AmAw3Lml+g/jbE/Nx5gDvNi6KS6
TLSH T1DC276C136A28E70EE62831344DB1DA94AB791C4141D7A85BA396F308F8F316C5E7EDF1
telfhash t178c47582eca5356b2fc40b10ccfe5548c779d441c097eeec1ab2957ae0d68851fbe39a
gimphash e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
4
# of downloads :
113
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
golang
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2026-10-14T05:07:00Z UTC
Last seen:
2026-10-15T16:12:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=d5b1ea40-1b00-0000-45c4-3ba68d090000 pid=2445 /usr/bin/sudo guuid=3890e643-1b00-0000-45c4-3ba694090000 pid=2452 /tmp/sample.bin guuid=d5b1ea40-1b00-0000-45c4-3ba68d090000 pid=2445->guuid=3890e643-1b00-0000-45c4-3ba694090000 pid=2452 execve
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Gathering data
Threat name:
Linux.Trojan.Generic
Status:
Suspicious
First seen:
2026-10-14 07:49:18 UTC
File Type:
ELF32 Big (Exe)
AV detection:
6 of 23 (26.09%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Behaviour
Enumerates kernel/hardware configuration
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 860f4f19a0718cccc073d509d241ee6ab0ec1ae61ce6005b7e0b674e91bdfec4

(this sample)

  
Delivery method
Distributed via web download

Comments