MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ab1dbc5af7a80134c1752a10bf53202b40b0b51a96dcbafab1037b0d7723c8c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ab1dbc5af7a80134c1752a10bf53202b40b0b51a96dcbafab1037b0d7723c8c2
SHA3-384 hash:	b1f64257ec670cadf8c72e965e113fdb6383b44e0aab08267db2e47284905542423e9b4e8edbbb42a280033d36679d6f
SHA1 hash:	00285d0c9f8a7f503c5e1dedfa7c8fcf3f31301c
MD5 hash:	e6b92c70b7d35dd865a1de4ffddda8c7
humanhash:	edward-jersey-golf-nevada
File name:	bizy.arm5
Download:	download sample
File size:	1'406'447 bytes
First seen:	2026-02-03 19:28:50 UTC
Last seen:	2026-02-03 20:31:39 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:NX1GTAUogoGmMDF2762AjSNSjsUTW92JWdXZZKiO3dVFf9xUYmo:NlGTC6va7k62JcJkn3dVZQjo
TLSH	T1235533B787D44161C2411FDE811C9B86E60AB8AD2CE17C5BEC02D974A53672FFA211BE
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

28

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV

Gathering data

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

arm

Packer:

custom

Botnet:

unknown

Number of open files:

0

Number of processes launched:

0

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/ab1dbc5af7a80134c1752a10bf53202b40b0b51a96dcbafab1037b0d7723c8c2

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6ad4e37c-620a-4316-a1c1-f2f9a56dd22c

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/7ffd9f47-0cc4-4c5c-b5f4-c7a82f89c59a

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1862779

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/ab1dbc5af7a80134c1752a10bf53202b40b0b51a96dcbafab1037b0d7723c8c2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ab1dbc5af7a80134c1752a10bf53202b40b0b51a96dcbafab1037b0d7723c8c2/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vmo3ywxxvaatjqlvfiil6uzafnalbni2s3olv6vran5q25zdzdba._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

upx

Link:

https://tria.ge/reports/260203-x7bkyafs7a/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.