MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aa5bc469d2668e1adef42f78b3247ed92bdccb241031035116357d05ba4ac028. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	aa5bc469d2668e1adef42f78b3247ed92bdccb241031035116357d05ba4ac028
SHA3-384 hash:	668c709aecb36bebda4524e5dc5d09fe9d1b6d6dd447f138fa0be76fa5ab969310418388ad9fa75718ca922934504d7b
SHA1 hash:	c70d42bafa9595872ae5b2388b1061dca7ff1691
MD5 hash:	585a5346ba52f6ab0ac50e077ba20def
humanhash:	london-fourteen-johnny-fifteen
File name:	x86_64
Download:	download sample
File size:	1'621'756 bytes
First seen:	2026-01-08 19:27:42 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:wKSc8CzOx8GxVvM3lQ+9Xknlat2lp8MhzUE8swuW46sJ/gWhHhbVlGttgKAmx/do:EpCKabVQ+9qlNlpjN8H8JZGtucdo
TLSH	T1FB7533D315420FB4ABD2FF3881186986E661DEB44B7EB3B8B274D67019437F6A230875
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

51

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6960055907ef5fa68e81ae0a/reports/457aa16b-7872-4fe7-b60c-51201d905abd/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/0ab7f7cc-3118-4bfd-a214-122729cc15b8

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/7ca00895-03a3-4a02-a622-c69bc7184867

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1846862

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/aa5bc469d2668e1adef42f78b3247ed92bdccb241031035116357d05ba4ac028

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/aa5bc469d2668e1adef42f78b3247ed92bdccb241031035116357d05ba4ac028/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-12 05:24:37 UTC

File Type:

ELF64 Little (Exe)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vjn4i2osm2hbvxxuf54lgjd63ev5zszecayqguiwgv6qloskyaua._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

linux upx

Link:

https://tria.ge/reports/260108-x6vx7agz7f/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/d6b08c0d-fa89-4cd4-8939-d7f8ed7102ae

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/aa5bc469d2668e1adef42f78b3247ed92bdccb241031035116357d05ba4ac028