MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f7dd13bfce124d2210d93fda6bf698415318fedefd932063974c829fc1763900. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments

SHA256 hash: f7dd13bfce124d2210d93fda6bf698415318fedefd932063974c829fc1763900
SHA3-384 hash: 3900c45c15652b132e6bebd02e71119193d0c1181d819794df538634f24d24d9d5d4ba905f93cba0096ba681a6e8d7d4
SHA1 hash: 5b062288da33e9e9384d6ae3baec273d6e22a0af
MD5 hash: 718f0fb3abb9b2e7456742cb22491819
humanhash: double-item-fish-fix
File name:bizy.mipss
Download: download sample
File size:1'359'983 bytes
First seen:2026-02-14 10:21:17 UTC
Last seen:2026-02-14 11:22:59 UTC
File type: elf
MIME type:application/x-executable
ssdeep 24576:RzOnel5KDZdILKFKxcKJ1ayxqFz3bhAGc0iYdUTdH9NydY46jxhnyaOrzs9:R9XKNdI+FKTxqd3bhg0iYIddNydYkaOm
TLSH T12F55332B3172D73A57DC5892A7DCD26E5069EACBC44CE7DA20A0C441FB5722E610CBDB
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
3
# of downloads :
55
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
custom
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Status:
terminated
Behavior Graph:
%3 guuid=8aab870c-1700-0000-a877-8117230e0000 pid=3619 /usr/bin/sudo guuid=1629fc0e-1700-0000-a877-81172d0e0000 pid=3629 /tmp/sample.bin guuid=8aab870c-1700-0000-a877-8117230e0000 pid=3619->guuid=1629fc0e-1700-0000-a877-81172d0e0000 pid=3629 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1869501 Sample: bizy.mipss.elf Startdate: 14/02/2026 Architecture: LINUX Score: 48 14 169.254.169.254, 80 USDOSUS Reserved 2->14 16 109.202.202.202, 80 INIT7CH Switzerland 2->16 18 3 other IPs or domains 2->18 20 Multi AV Scanner detection for submitted file 2->20 6 python3.8 dpkg 2->6         started        8 dash rm 2->8         started        10 dash rm 2->10         started        12 bizy.mipss.elf 2->12         started        signatures3 process4
Threat name:
Linux.Trojan.Multiverze
Status:
Malicious
First seen:
2026-02-14 10:22:34 UTC
File Type:
ELF32 Big (Exe)
AV detection:
7 of 24 (29.17%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  5/10
Tags:
discovery upx
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf f7dd13bfce124d2210d93fda6bf698415318fedefd932063974c829fc1763900

(this sample)

  
Delivery method
Distributed via web download

Comments