MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e9bb7bf9e3fe5de02a392d09369e339e70613d795c4af72959eb00afcc3875ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: e9bb7bf9e3fe5de02a392d09369e339e70613d795c4af72959eb00afcc3875ed
SHA3-384 hash: f934a8e079bccd42d52a167c73d9c0af4f3da04721e64930f832323551c0d26c6085d0a06cfcefd7a0e02f1499c12c52
SHA1 hash: 2025a77ee3a6f542adedc960494c247e7005e3e4
MD5 hash: a53dfe3d37dc6958ec71c1e67a1919b6
humanhash: kentucky-delta-nitrogen-kilo
File name:9e3363f017c60726bf610a2a472040144T.
Download: download sample
File size:90'903 bytes
First seen:2026-01-04 00:34:06 UTC
Last seen:2026-01-04 02:18:12 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:nONHdJK8USMwsc7ZydVk2VxDAUHxJs+zpvJ+3UKo/pVsQjztQFF:nON9c8UCsc7cHbNL+uxVfz2F
TLSH T1F393631E6E639F6DF768873447B74E749B6D23D62AD1D684D2ECC1002E2024E641FFA8
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
2
# of downloads :
69
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
File Type:
elf.32.be
First seen:
2026-01-03T23:34:00Z UTC
Last seen:
2026-01-03T23:45:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=92247a5d-1900-0000-cf28-c2dbb6120000 pid=4790 /usr/bin/sudo guuid=68d6515f-1900-0000-cf28-c2dbbe120000 pid=4798 /tmp/sample.bin guuid=92247a5d-1900-0000-cf28-c2dbb6120000 pid=4790->guuid=68d6515f-1900-0000-cf28-c2dbbe120000 pid=4798 execve
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Linux.Trojan.Generic
Status:
Suspicious
First seen:
2026-01-04 00:34:16 UTC
File Type:
ELF32 Big (Exe)
AV detection:
5 of 24 (20.83%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf e9bb7bf9e3fe5de02a392d09369e339e70613d795c4af72959eb00afcc3875ed

(this sample)

  
Delivery method
Distributed via web download

Comments