MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e
SHA3-384 hash: 9c38fab26d171a557140dbfa8f50790b4f6277103ad7dae6829622d7d579552b4033e4eb3651a7e90a6c8099f1ee0828
SHA1 hash: 2bb03598e9ad4eef66e688c45db0ea0afce40957
MD5 hash: 848a746701f2be308d8979659b1fe23c
humanhash: orange-comet-pizza-football
File name:main.armv4eb
Download: download sample
File size:44'484 bytes
First seen:2026-08-10 21:29:39 UTC
Last seen:2026-08-11 03:05:26 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:evsma5fs3nd1LMDuF+/uASaNk2qh6Y9QRDDvoWwyOofUEuGlAbihUvf+wGatzFaO:e0pNkXkJ/cEuJnvfVzFaO
TLSH T1A213D882F347D922C40A193567BAC776370279F61F66D2108D65EACCFB6B6C0A9B1423
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
2
# of downloads :
65
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
gcc
Link:
https://www.filescan.io/uploads/6a7a42fd26f9e2b4388cbf1f/reports/fba2b52b-9045-40f6-a0b3-ad81f737bf3f/overview
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2026-08-11T06:42:00Z UTC
Last seen:
2026-08-11T08:28:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/8e66c5be-c054-4a36-aaf0-9658674565cf
Behavior Graph:
Download SVG
%3 guuid=98ed9b00-1a00-0000-625a-d95773060000 pid=1651 /usr/bin/sudo guuid=a722fa07-1a00-0000-625a-d9577b060000 pid=1659 /tmp/sample.bin guuid=98ed9b00-1a00-0000-625a-d95773060000 pid=1651->guuid=a722fa07-1a00-0000-625a-d9577b060000 pid=1659 execve
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/2d37ac68-576c-4dc6-9a32-2bb3f571fce4
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
3 / 100
Link:
https://www.joesandbox.com/analysis/1955469
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rszmf24fi6zmeyhuvoh2zvqd4k6t5vaacem6occqdlgdhfhaqqha._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/260810-1cr6zstxe1/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:TH_Generic_MassHunt_Linux_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Generic Linux malware mass-hunt rule - 2026
Reference:https://cyfare.net/
Rule name:unixredflags3
Create hunting rule
Author:Tim Brown @timb_machine
Description:Hunts for UNIX red flags

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 8cb2c2eb8547b2c260f4ab8facd603e2bd3ed4001119e708501acc3394e0840e

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3897942/
  
Delivery method
Distributed via web download

Comments