MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bc2811a4c494686c90dc221178732286729c211e7b0998519f089c8b7909be84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments 1

SHA256 hash: bc2811a4c494686c90dc221178732286729c211e7b0998519f089c8b7909be84
SHA3-384 hash: a031f33fc779fc2dbf8bfc2391e50d72284ffa4c20cc6b54db29f1acdec8fa3dce86aa9ae4629aff3ceb425538ae063b
SHA1 hash: 3b89ecf5e5c29b84f99048d295892fbae21de6a2
MD5 hash: 5229c6fbaf97ca3eca65c2ff4476bef0
humanhash: lake-spaghetti-jig-skylark
File name:5229c6fbaf97ca3eca65c2ff4476bef0
Download: download sample
File size:1'272 bytes
First seen:2024-02-11 11:26:48 UTC
Last seen:2024-02-11 13:34:04 UTC
File type: elf
MIME type:application/x-executable
ssdeep 24:3jvDq3N0yTKE9kNY8MRQPhCrjSkvFSJ9lrNTawqFk:XWVTlUY8MtDv+9ZNuPk
TLSH T1BC21FC7FFBBB8A06C850903A0E63A3147660D88C0014926ABB217B1DDC116116E921F0
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Reporter zbetcheckin
Tags:32 elf sparc

Intelligence


File Origin
# of uploads :
2
# of downloads :
88
Origin country :
FR FR
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
anti-debug
Result
Verdict:
MALICIOUS
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Multiverze
Status:
Malicious
First seen:
2024-02-11 11:27:05 UTC
File Type:
ELF32 Big (Exe)
AV detection:
14 of 24 (58.33%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf bc2811a4c494686c90dc221178732286729c211e7b0998519f089c8b7909be84

(this sample)

  
Delivery method
Distributed via web download

Comments



Avatar
zbet commented on 2024-02-11 11:26:49 UTC

url : hxxp://194.169.175.30/dlr.spc