MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12
SHA3-384 hash:	643c8363360a539c2c9c248436748063a35b739280227e7cd33b70674e0fa711830f12534d1afa3818ff9cadbc8d5bbf
SHA1 hash:	320e8b6b18ddd1519cc83839c0521a3e95fcae0b
MD5 hash:	b755d8aacf897adcf2a8918940c3ff4a
humanhash:	nitrogen-island-uniform-west
File name:	skid.mips
Download:	download sample
File size:	4'498 bytes
First seen:	2026-01-03 10:53:02 UTC
Last seen:	2026-01-04 08:51:36 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	96:G3xBoCUHclW49mrxCPa/2QbgFeQHnAe2Y4DT7j4lSg3+hq9TG:G3HpdlWcsCi/9epHnATD4lY
TLSH	T19A915CA0F7B90863D44CF53DF0DA40D9598C5A85A08025EC9D9BAD7AA045F5DF525007
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	xar
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

65

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

masquerade mirai

Link:

https://www.filescan.io/uploads/6958f5162fb7bb52ca85d95d/reports/6bc5e8cd-012b-44a9-b71b-30850859c7c1/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2026-01-03T11:16:00Z UTC

Last seen:

2026-01-03T11:26:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/62b8f84b-80e7-44ae-a0c5-22030b6f7a15

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/09e9b874-7230-4059-82cc-930856316567

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1844065

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12/

ReversingLabs TitaniumCloud Linux.Backdoor.Multiverze

Threat name:

Linux.Backdoor.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-01-03 10:53:11 UTC

File Type:

ELF32 Big (Exe)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4z5ggtfs3fwsryytrjsl2zm2hpanezaast4clwbax65qqdokbmja._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

discovery upx

Link:

https://tria.ge/reports/260103-mzemhshj3t/

Behaviour

System Network Configuration Discovery

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/16b40814-d849-4919-8ac2-b0a5b4d51ce7

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e67a634cb2d96d28e3138a64bd659a3bc0d2640094f825d820bfbb080dca0b12