MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224c
SHA3-384 hash:	793538b29feed787eb3526ed03a551c4b972f6b8e7a8aaf146926872e9cab12c3740ec96be501907d5b4513261a8871b
SHA1 hash:	3851d83b34aae7c4123b78d73f66f18a3c9f22c4
MD5 hash:	deba7e9f4c7d488d3f5ecb3a796f8535
humanhash:	diet-alpha-east-item
File name:	ppc
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	25'752 bytes
First seen:	2024-12-16 00:46:37 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:VWVuRvUXij3HxiyTG7TLGg1m7bQy4gbdd6PfgtfwVx2:oV6LLRi6IkQTkdxfwVx2
TLSH	T15CC22B41733A0D47E2EB5AF02E3F27D5A3EA9D9030B5A509797E9F46C172A335082E4D
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

169

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Trojan.Mirai-7732430-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=675f7a828fb73f13afcba27flinux22vpnfull_triage

Tags:

malware

Dr. Web vxCube Suspicious

Result

Verdict:

Suspicious

Maliciousness:

Behaviour

Connection attempt

Sends data to a server

Receives data from a server

Creating a file

Runs as daemon

Opens a port

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

anti-debug

Link:

https://www.filescan.io/uploads/675f7887e77197369948bab1/reports/c3e078e7-8080-4a12-8d75-d5aab0e0fd5e/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/4060e262-9df6-49ce-826d-604f40efd47b

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

3 / 100

Link:

https://www.joesandbox.com/analysis/1575553

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224c/

ReversingLabs TitaniumCloud Linux.Backdoor.Gafgyt

Threat name:

Linux.Backdoor.Gafgyt

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-16 00:47:04 UTC

File Type:

ELF32 Big (Exe)

AV detection:

10 of 38 (26.32%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6xzwbjzzxm6u3hskbcn5g7k3wyvohzxbimqanezw3igcglxlejga._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/241216-a47gwaxkfj/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-7732430-0

YARA:

n/a

Link:

https://app.threat.zone/submission/dac8d708-e66b-40b6-99d3-1e413f09bb14

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224c