MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d21f761832049cef81366aadcdea2b3e9b22f41885df220d91c796b4c59cdc1b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d21f761832049cef81366aadcdea2b3e9b22f41885df220d91c796b4c59cdc1b
SHA3-384 hash:	86fab7eadbbc911c8d13b3a8c57abf3d52b8bbe5351ca95ef03ea83f1d3289eca9123f25c56e9ae82e6656c99a90d752
SHA1 hash:	69b1bc19b1c2c78b27a9bfb07b970d811d82e29e
MD5 hash:	0b7cf0d494fc0865f879490389b9a334
humanhash:	undress-fanta-cardinal-vegan
File name:	sh4
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	15'666 bytes
First seen:	2025-01-03 20:06:39 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:TEaiTwt4Z5RSOgHDtvs1H+1h4pjedUDjjSE1:gaIwt4gDUAEedU3+Q
TLSH	T1C8624B7ED06EF9D0C4955678DCB698B41F46B15581712C7B5FC888A3008B238FA2ABA3
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

193

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=677844361ada70779825fc38linux22vpnfull_triage

Tags:

malware

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/677843696bdaf63248b695aa/reports/bfc2099a-3bbd-4796-98e1-83158473e964/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/22368ab8-0c95-41e3-8b4b-35aaf181e0e7

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1583917

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/d21f761832049cef81366aadcdea2b3e9b22f41885df220d91c796b4c59cdc1b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d21f761832049cef81366aadcdea2b3e9b22f41885df220d91c796b4c59cdc1b/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2ipxmgbsasoo7ajwnkw432rlh2nsf5ayqxpsedmry6lljrm43qnq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250103-yvy15stngp/

Threat.Zone Suspicious

Verdict:

Suspicious

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/e2bbebb1-e18d-471a-ac99-2e12024cdf56

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/d21f761832049cef81366aadcdea2b3e9b22f41885df220d91c796b4c59cdc1b