MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fc30cd3ea55b1fa25b7e732e7ddf1dbfb5d042fcfd33418b3b58fd63cc9c4030. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: fc30cd3ea55b1fa25b7e732e7ddf1dbfb5d042fcfd33418b3b58fd63cc9c4030
SHA3-384 hash: 8590bfd9fb524531c59a61e6874e3aa75a23038e4fd669c7acd12ee1cd9585c6879d0a0c607592144ca151737821ce0b
SHA1 hash: c314b2762ba4406eef2ce0b715205571f2f7d696
MD5 hash: 8bfddcabd1de1a3d848f6ff42f01d537
humanhash: london-leopard-three-texas
File name:bizy.arm6
Download: download sample
File size:1'196'304 bytes
First seen:2026-02-19 19:11:30 UTC
Last seen:2026-02-19 19:22:42 UTC
File type: elf
MIME type:application/x-executable
ssdeep 24576:VC3SCD5aVjKXpb9KyHK7nIgJtTpYIHzpquVF2TFl2w4rnglV6xlh:VTCNmjK5bBKLIgJtTWWz48F25l2w4rnt
TLSH T15D45334CF4CF7CA2EAFB48DEE34923890743FC4CC95599E321226A70A166E787E17525
Magika elf
Reporter abuse_ch
Tags:elf

Intelligence


File Origin
# of uploads :
2
# of downloads :
37
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
masquerade
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
custom
Botnet:
unknown
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Status:
terminated
Behavior Graph:
%3 guuid=3c197287-1600-0000-127e-57cfa60f0000 pid=4006 /usr/bin/sudo guuid=8f574a89-1600-0000-127e-57cfad0f0000 pid=4013 /tmp/sample.bin guuid=3c197287-1600-0000-127e-57cfa60f0000 pid=4006->guuid=8f574a89-1600-0000-127e-57cfad0f0000 pid=4013 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Multiverze
Status:
Malicious
First seen:
2026-02-19 20:23:15 UTC
AV detection:
6 of 23 (26.09%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  5/10
Tags:
upx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf fc30cd3ea55b1fa25b7e732e7ddf1dbfb5d042fcfd33418b3b58fd63cc9c4030

(this sample)

  
Delivery method
Distributed via web download

Comments