MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120
SHA3-384 hash:	68d6ed0e5afd3f632e1be055d03ad09795a23d27cd008432a708bb5aa7ee7a1666954c32fabd9a97c134363220a079df
SHA1 hash:	d85e3abe946a55abca56867150f63b0b633de8f6
MD5 hash:	0b01a6563de9dbab6d1dbc2754a5f6af
humanhash:	pasta-freddie-carbon-lima
File name:	npl5h1u1kw
Download:	download sample
File size:	185'581 bytes
First seen:	2026-01-15 09:34:18 UTC
Last seen:	2026-01-16 15:32:17 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	3072:ozdurayQy5HEcMf3onvswyRegQ3EbVZsLSIrutZFA0byR2SV2sH4gB8tv1:ozdurafekcMwnvSvQ+Z4NCFA0bysoPbQ
TLSH	T19204F100FF09092BC1CB6E742B7F2771B73D4A2528BBD218250ABF6616B387A49537D5
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6968b4b6b5214ecba5f03c55/reports/50ae62c2-6e63-4c36-9530-67c76ad9a6c2/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2026-01-15T05:30:00Z UTC

Last seen:

2026-01-15T07:45:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/e5932476-c275-4e6f-8b1b-7c0666c0c857

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/0642b7f6-a3a6-42a7-b535-446b4a6c862d

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

evad

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1851258

Signature

Spawns processes using file descriptor names (likely to hide the executable path or fileless malware)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wylijd3nzaxi22eyc2xfgncjff5xfzj7yeabwftcz4aepeybeeqa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260115-lj3hzah18c/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/0cee6637-c17d-4560-a3f4-a9afaf8b7f28

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b616848f6dc82e8d689816ae533449297b72e53fc1001b1662cf004793012120