MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f
SHA3-384 hash: c50b646c40f767ee28a567bdb0e6d0247fbe321e834a3fb25b726a206a69a9c7e8274949950184793ff640d350871b0d
SHA1 hash: b4950e5d84f6b93626f364656f45cab48e7a3499
MD5 hash: 0c8db932bdc5dc438e01e8382ff71d6e
humanhash: nine-white-pasta-high
File name:bizy.mips64
Download: download sample
File size:253'615 bytes
First seen:2026-01-16 02:25:39 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 3072:l1DJ2UgvLbs2rHxBjb02F7Npe1qUTeqh7U/k3yz51MM/DaLdSddppLt4Jbs7B2fH:8pXzT1Af7gjEXMc4Fpe
TLSH T12B4484627F99AE0FC699323956A6C13473CB7A41C0E07036CA93D7091FAE274D85EDD8
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6969a1d06694ad95ed500555/reports/45a5c049-e4a0-41fb-9fc2-183b6c380bc4/overview
Verdict:
Unknown
File Type:
elf.64.be
First seen:
2026-01-16T03:31:00Z UTC
Last seen:
2026-01-16T03:47:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/d006389e-2331-4eeb-825c-ab2392a79865
Behavior Graph:
Download SVG
%3 guuid=c209c19d-1a00-0000-18a7-89a03a0b0000 pid=2874 /usr/bin/sudo guuid=51367a9f-1a00-0000-18a7-89a0400b0000 pid=2880 /tmp/sample.bin guuid=c209c19d-1a00-0000-18a7-89a03a0b0000 pid=2874->guuid=51367a9f-1a00-0000-18a7-89a0400b0000 pid=2880 execve
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/4c4cf6ff-4d1f-4a7d-b2ea-954485711b99
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Link:
https://www.joesandbox.com/analysis/1851799
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f/
Threat name:
Linux.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-01-16 02:26:27 UTC
File Type:
ELF64 Big (Exe)
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=r5mzyb4en23iulja3p5nxbv2h7funzw6ff4zfwvdmdhyavzbfchq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Link:
https://tria.ge/reports/260116-cw2yjacr3y/
Behaviour
System Network Configuration Discovery
Verdict:
Unknown
Tags:
n/a
YARA:
n/a
Link:
https://app.threat.zone/submission/36b23e21-9ae0-4e31-b653-070708fdea19
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:linux_generic_ipv6_catcher
Create hunting rule
Author:@_lubiedo
Description:ELF samples using IPv6 addresses

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 8f599c07846eb68a2d20dbfadb86ba3fcb46e6de297992daa360cf805721288f

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3720818/
  
Delivery method
Distributed via web download

Comments