MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f59863611dd0f7470e712c8301b49f3d7d5fd9c750d5bea36fd808a19ae1c204. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f59863611dd0f7470e712c8301b49f3d7d5fd9c750d5bea36fd808a19ae1c204
SHA3-384 hash:	9520032d1e0e5631cd4f9ad687f7de32ea77a0b225cd8fc645dc688ec352029fa8994e60341f99e599d3f9fdd442eb35
SHA1 hash:	011acd7b04e9464302daf3adb9e054d00134e027
MD5 hash:	81a3ccffd69dfe1dc36c6512dd208c85
humanhash:	batman-sink-one-oklahoma
File name:	bizy.arm5
Download:	download sample
File size:	1'128'187 bytes
First seen:	2026-01-05 07:50:12 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	24576:NX1GTAUogoGmMDF2762AjSNSjsUTW92JWdXZZKiO3d4:NlGTC6va7k62JcJkn3d4
TLSH	T1CF3533FBAB964161C2C51ADEE01D574FE206B66E28D03C56EC42D934953B26EFF021F8
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

31

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/695b6d3c8d1aa9829e2a94fe/reports/c43f2b20-aa9c-4740-a3f6-411a39d4c738/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2b8a3165-0cc1-45ea-9752-d02289a0e6cf

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/b7369614-7152-4aab-8745-519662aab7d2

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1844753

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/f59863611dd0f7470e712c8301b49f3d7d5fd9c750d5bea36fd808a19ae1c204

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f59863611dd0f7470e712c8301b49f3d7d5fd9c750d5bea36fd808a19ae1c204/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-01-05 07:50:23 UTC

File Type:

ELF32 Little (Exe)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6wmggyi52d3uodtrfsbqdne7hv6v7wohkdk35i3p3aekdgxbyica._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

upx

Link:

https://tria.ge/reports/260105-jph1eayndn/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/b99440d6-9b5c-4182-a4ed-1f3a54c600db

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/f59863611dd0f7470e712c8301b49f3d7d5fd9c750d5bea36fd808a19ae1c204