MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619
SHA3-384 hash:	2d29902df12d6ef77dc5cc6fde3b0fd9962d3b27677a1ebef70c5c741090322102307aa0e44fc5f16d2b7cbc5ebe2449
SHA1 hash:	372adccfb7ea4510f31020e204b9e267d023eed2
MD5 hash:	6a273d57365152e11c71aa0ec0834b76
humanhash:	mango-pennsylvania-august-purple
File name:	na
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	149'209 bytes
First seen:	2026-02-06 10:27:37 UTC
Last seen:	2026-02-06 11:26:40 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	3072:rOlNTZa+Ef6jQeuwBXDfOAl59mdqDS0vRHH6yQAQNLJnc54jLDbFgoOlB5:aPGfcQalGAl+AvRnsAQ7m4PDRgH
TLSH	T180E31206FA8794F6E0830A7259D39A1B5730FB710584EE97D306BB24B9F3B25510F59C
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

73

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Siggen.11342.13518.12621.UNOFFICIAL

Alert

Create hunting rule

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

elf.32.le

First seen:

2026-02-06T08:48:00Z UTC

Last seen:

2026-02-08T08:14:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/8bac991b-0bb4-4b48-a2b2-e9ec83366f53

Intezer Gafgyt

Malware family:

Gafgyt

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/e14a1650-72a2-4385-8d12-24c802b37225

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1864610

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-06 10:28:35 UTC

File Type:

ELF32 Little (SO)

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yrowtudtgaop2lbocoqenoemnxhr4u256k4vltfjdfqtmpnb2ymq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

discovery linux

Link:

https://tria.ge/reports/260206-mhrwhshs6a/

Behaviour

Reads runtime system information

Traces itself

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.29

Link:

https://yomi.yoroi.company/submissions/c45d69d073301cfd2c2e13a046b88c6dcf1e535df2b955cca91961363da1d619