MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a
SHA3-384 hash: 311bd1d611a05f982f64748833a06fbeef0479f6518bc362dbdb498546265ccc2b30cada122a7999e513cf7962892d14
SHA1 hash: 2495134a4aebf374df9f03b67df6a4d55dc7997f
MD5 hash: 961260c84c160be2a8ea803f7f17c2a8
humanhash: london-vermont-fourteen-arizona
File name:arm7
Download: download sample
File size:89'384 bytes
First seen:2026-01-23 14:11:08 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:pqnShc1Osbxu403NCltyIBdLRx8Fc0v3eScxlVUEqKio3DRRaUVak41oRoQBd/2Q:5h6ru40d8tJLRYv3eHxPUENieRaUVakL
TLSH T1B0931856BD829B1695D556BFFE4E528E33032B6CE3EE7203DE145F2427CA91B0E3A401
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
expand lolbin rust
Link:
https://www.filescan.io/uploads/697381905db9ae47708f757f/reports/f86fdb82-9f8c-4e2d-a855-7e2a4fb0c6ad/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Verdict:
Unknown
File Type:
elf.32.le
Link:
https://opentip.kaspersky.com/972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a/results?tab=lookup
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/27783838-795a-4d15-adf1-22d72b8c66a2
Behavior Graph:
Download SVG
%3 guuid=af6e592b-1a00-0000-e7b2-6a48940a0000 pid=2708 /usr/bin/sudo guuid=a05e252e-1a00-0000-e7b2-6a489c0a0000 pid=2716 /tmp/sample.bin guuid=af6e592b-1a00-0000-e7b2-6a48940a0000 pid=2708->guuid=a05e252e-1a00-0000-e7b2-6a489c0a0000 pid=2716 execve
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/82421429-2864-4ecb-a901-00b4398aa891
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Link:
https://www.joesandbox.com/analysis/1856405
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a/
Threat name:
Linux.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-01-23 14:11:38 UTC
File Type:
ELF32 Little (Exe)
AV detection:
6 of 23 (26.09%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=s4tvfn6zmqajibhtyztgfqyyal2zlnul2hhnhxcgf237ueikfqna._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/260123-rnp2bsdz3b/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 972752b7d964009404f3c66662c31802f595b68bd1ced3dc462eb7fa110a2c1a

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3737665/
  
Delivery method
Distributed via web download

Comments