MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd
SHA3-384 hash:	dc704672a1a59a7dfa89be01964f827e8c3e22a93a17c8180196d164647cea9df98e0be9a05ca23e7334b49a8ce9535a
SHA1 hash:	200655e30742c1025f6035aed5bf318346282a1b
MD5 hash:	407528f7934966d6aa4701f506b72a4d
humanhash:	yankee-social-charlie-ack
File name:	hikarm5
Download:	download sample
File size:	1'185 bytes
First seen:	2025-01-27 07:11:21 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	24:vBdT3Nqe3YDr4TX+3ktFNorCTK9K5QdN/H3rwBdtTlZI8ZD:vBdhk3OOuTK9KobwBdtTlZzZD
TLSH	T17321D0B4DD490653C5454836B72D067A3E377A7DD366B7E05E0D0E90AB2F5827837118
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

88

Origin country :

DE

Vendor Threat Intelligence

CyberFortress

Gathering data

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

arm

Packer:

not packed

Botnet:

unknown

Number of open files:

0

Number of processes launched:

0

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/261aca98-a27c-4bf9-b059-146391a61955

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1600159

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=7benocfjpca4gn27dlvwlrfhkp6kutxymje6qbsrhe65msh6rc6q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/250127-h1hcksyjfp/

Threat.Zone Suspicious

Verdict:

Suspicious

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/97d54f39-0d5e-47cd-9255-78ea07070265

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f848d708a97881c3375f1aeb65c4a753fcaa4ef86249e80651393dd648fe88bd