MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b13b30180376a728b48a3c61daa2f891ff5fc87202484396c27256262c7c461b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: b13b30180376a728b48a3c61daa2f891ff5fc87202484396c27256262c7c461b
SHA3-384 hash: 43c4160ead54d2c9d27b3044e54d97cd67421a90fae3580f92886260bdc450bedc4b2f935bf33fa5ab0118a98a0c70e3
SHA1 hash: 63164b818e43cea2c2eb41df80f7dc835d53e7d1
MD5 hash: c4baab0651d9b89ba9f8bf3dcdaf46e7
humanhash: hamper-king-maryland-sodium
File name:bizy.mips
Download: download sample
File size:1'082'383 bytes
First seen:2026-01-18 14:08:34 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 24576:jFGxoS/FrclyPOS87V39jThvx/eT/f8uIYkqG+R8:jFGTdrclfSYV9jTL/0cL+R8
TLSH T1C635339F5501D6C78B28B15F619858FB62E03F878ECB315AA4E965F5D2D39CE20023C3
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
1
# of downloads :
61
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
masquerade
Verdict:
Clean
File Type:
elf.32.be
First seen:
2026-01-18T11:55:00Z UTC
Last seen:
2026-01-18T12:08:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=c5d7951a-1b00-0000-a79a-1b6f8c0b0000 pid=2956 /usr/bin/sudo guuid=ec852d1d-1b00-0000-a79a-1b6f900b0000 pid=2960 /tmp/sample.bin guuid=c5d7951a-1b00-0000-a79a-1b6f8c0b0000 pid=2956->guuid=ec852d1d-1b00-0000-a79a-1b6f900b0000 pid=2960 execve
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
2 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Linux.Trojan.Generic
Status:
Suspicious
First seen:
2026-01-18 14:10:30 UTC
File Type:
ELF32 Big (Exe)
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  5/10
Tags:
discovery upx
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf b13b30180376a728b48a3c61daa2f891ff5fc87202484396c27256262c7c461b

(this sample)

  
Delivery method
Distributed via web download

Comments