MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106
SHA3-384 hash:	dd81b6e8fd3b4417185a3cf003185af1308ce00aafbd0895a218c65686839c885209cff16458d4b8f4fc3edc2b3727eb
SHA1 hash:	ee2733fe5cd4beca4fdc45f1ca177be755b7afd8
MD5 hash:	dd3e61bd2ec3e2759eaad3c736e71441
humanhash:	spring-failed-don-fanta
File name:	886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106_from_120.79.247.255_redis_slave.bin
Download:	download sample
File size:	7'176 bytes
First seen:	2026-11-14 20:16:53 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	48:RkbuH5AS+EnAcdVi3jQ8rsZcFebcE/kwtaVCFZOWmUWF+q5A61A+M/XNWSGTuWBE:RuBSmcR+8/yUblpMRq9Ppmvj0bj
TLSH	T1D2E1DD1F9F42867FCC761F30C8BB0471CEF024AD9C6589A3850C18D426DE198BB9A6F9
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	nullblue67
Tags:	elf rce redis redis-module redis-rogue

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

74

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6af8c1caeb5f5b5f8ebe6b2f/reports/7fbdbf5f-0fb9-4bb3-9eed-d0bd9229e7ae/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

x86

Packer:

UPX

Botnet:

unknown

Number of open files:

0

Number of processes launched:

1

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/440a0364-9901-4f3e-954f-4cc6a2cdfd87

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/006d4a6d-aeb5-43b6-81fc-f0ae52276c8f

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/2006101

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

18%

Verdict:

Benign

File Type:

ELF

Link:

https://malprob.io/report/886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-11-14 20:17:15 UTC

File Type:

ELF64 Little (SO)

AV detection:

3 of 36 (8.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rbwcfkxcuy64o6ydy4ouzwrekgdfkzv7w7gyjqbwudo4h4l4ieda._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/261114-y2rkmsgv7r/

VirusSign wacatac

Malware Family:

wacatac

Alert

Create hunting rule

Malicious:

True

Tags:

elf shared-library 64bit

Link:

https://intel.virussign.com/intelligence/file/886c22aae2a63dc77b03c71d4cda2451865566bfb7cd84c036a0ddc3f17c4106

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.