Open-source atomic malware analysis

Analyze another

59020a17aa709099c1a62486786f68f6b2442694ac22c224c0283b7d3aa10276

ELF
Verdict: BENIGN
SHA256: 59020a17aa709099c1a62486786f68f6b2442694ac22c224c0283b7d3aa10276
Mal-ecule
K(Li)H₃(Ds₃F₃Mg)Md₃(Bi)
Size 3.5 MB download
First seen 2 days ago
Analyzed 1 day ago
Source malshare.com
Also detected by 1 source
libReverseSigma.so elf
0x11d1c 5f6378615f656e645f6361746368005f _cxa_end_catch._
0x11d2c 5f6378615f667265655f657863657074 _cxa_free_except
0x11d3c 696f6e005f5f6378615f67756172645f ion.__cxa_guard_
0x11d4c 61626f7274005f5f6378615f67756172 abort.__cxa_guar
0x11d5c 645f61637175697265005f5f6378615f d_acquire.__cxa_
0x11d6c 67756172645f72656c65617365005f5f guard_release.__
0x11d7c 6378615f7468726f77005f5f6572726e cxa_throw.__errn
0x11d8c 6f005f5f6778785f706572736f6e616c o.__gxx_personal
0x11d9c 6974795f7630005f5f737461636b5f63 ity_v0.__stack_c
0x11dac 686b5f6661696c006173696e66006174 hk_fail.asinf.at
0x11dbc 616e326600646c636c6f736500646c6f an2f.dlclose.dloDynamic library loading via dlopen
0x11dcc 70656e00646c73796d00657870326600 pen.dlsym.exp2f.dlsym function symbol
0x11ddc 66636c6f73650066656f660066657272 fclose.feof.ferr
0x11dec 6f720066666c75736800666765746300 or.fflush.fgetc.
0x11dfc 666765747300666d6f646600666f7065 fgets.fmodf.fope
0x11e0c 6e006672656164006672656500667365 n.fread.free.fse
0x11e1c 656b00667365656b6f006674656c6c00 ek.fseeko.ftell.
0x11e2c 6674656c6c6f0066777269746500676c ftello.fwrite.gl
0x11e3c 42696e645465787475726500676c436c BindTexture.glCl
0x11e4c 65617200676c44656c65746554657874 ear.glDeleteText
0x11e5c 7572657300676c47656e546578747572 ures.glGenTextur
0x11e6c 657300676c546578496d616765324400 es.glTexImage2D.
0x11e7c 676c546578506172616d657465726900 glTexParameteri.
0x11e8c 6973786469676974006c646578706600 isxdigit.ldexpf.
0x11e9c 6c6f63616c65636f6e76006d616c6c6f localeconv.mallo
0x11eac 6300706572726f7200706f7766007074 c.perror.powf.pt
0x11ebc 68726561645f63726561746500707468 hread_create.pth
0x11ecc 726561645f646574616368007265616c read_detach.real
0x11edc 6c6f6300737172740073717274660073 loc.sqrt.sqrtf.s
0x11eec 7472636d70007374726c656e00737472 trcmp.strlen.str
0x11efc 6e636d70007374727374720073747274 ncmp.strstr.strt
0x11f0c 6f6400737472746f6c00737472746f6c od.strtol.strtol
0x11f1c 6c00737472746f756c00737472746f75 l.strtoul.strtou
0x11f2c 6c6c00746f6c6f77657200756e676574 ll.tolower.unget
0x11f3c 630071736f7274007374646f75740073 c.qsort.stdout.s
0x11f4c 74726e6370790076736e7072696e7466 trncpy.vsnprintf
0x11f5c 0061636f73660061746f66006c6f6766 .acosf.atof.logf
0x11f6c 00706f7700676c416374697665546578 .pow.glActiveTex
0x11f7c 7475726500676c417474616368536861 ture.glAttachSha
0x11f8c 64657200676c42696e64427566666572 der.glBindBuffer
0x11f9c 00676c426c656e644571756174696f6e .glBlendEquation
0x11fac 00676c426c656e644571756174696f6e .glBlendEquation
0x11fbc 536570617261746500676c426c656e64 Separate.glBlend
0x11fcc 46756e63536570617261746500676c42 FuncSeparate.glB
0x11fdc 75666665724461746100676c42756666 ufferData.glBuff
0x11fec 65725375624461746100676c436f6d70 erSubData.glComp
0x11ffc 696c6553686164657200676c43726561 ileShader.glCrea
0x1200c 746550 teP
0x12183 616d00676c5665727465784174747269 am.glVertexAttri
0x12193 62506f696e74657200676c5669657770 bPointer.glViewp
0x121a3 6f727400737464657272007374726370 ort.stderr.strcp
0x121b3 7900636c6f636b5f67657474696d6500 y.clock_gettime.
0x121c3 6d70726f7465637400737973636f6e66 mprotect.sysconf
0x121d3 005f5a4e5374365f5f6e646b31376e75 ._ZNSt6__ndk17nu
0x121e3 6d5f67657449634e535f313969737472 m_getIcNS_19istr
0x121f3 65616d6275665f6974657261746f7249 eambuf_iteratorI
0x12203 634e535f3131636861725f7472616974 cNS_11char_trait
0x12213 734963454545454532696445006c6f67 sIcEEEEE2idE.log
0x12223 5f696e7465726e616c5f696d706c005f _internal_impl._
0x12233 5f616e64726f69645f6c6f675f767072 _android_log_vpr
0x12243 696e74006c6f675f int.log_
0x2969f 537439747970655f696e666f00616e64 St9type_info.and
0x296af 726f69645f7365745f61626f72745f6d roid_set_abort_m
0x296bf 65737361676500636c6f73656c6f6700 essage.closelog.
0x296cf 6670757463006f70656e6c6f67005f5a fputc.openlog._Z
0x296df 537431337365745f7465726d696e6174 St13set_terminat
0x296ef 655046767645005f5a53743134736574 ePFvvE._ZSt14set
0x296ff 5f756e65787065637465645046767645 _unexpectedPFvvE
0x2970f 005f5f6378615f64656d616e676c6500 .__cxa_demangle.
0x2971f 6973616c706861006973757070657200 isalpha.isupper.
0x2972f 646c5f697465726174655f7068647200 dl_iterate_phdr.
0x2973f 707468726561645f6b65795f64656c65 pthread_key_dele
0x2974f 7465006c69626c6f672e736f006c6962 te.liblog.so.lib
0x2975f 7a2e736f006c6962616e64726f69642e z.so.libandroid.Android native library marker
0x2976f 736f006c696245474c2e736f006c6962 so.libEGL.so.lib
0x2977f 474c455376322e736f006c6962632e73 GLESv2.so.libc.s
0x2978f 6f006c69626d2e736f006c6962646c2e o.libm.so.libdl.
0x2979f 736f005f6564617461005f5f6273735f so._edata.__bss_
0x297af 7374617274005f5f6273735f73746172 start.__bss_star
0x297bf 745f5f005f5f6273735f656e645f5f00 t__.__bss_end__.
0x297cf 5f5f656e645f5f005f656e64006c6962 __end__._end.lib
0x297df 526576657273655369676d612e736f00 ReverseSigma.so.
0x297ef 4c4942430000000000000001 LIBC........
0x1bcce0 ffffffffffffff0f0000000000000000 ................
0x1bccf0 4e33676863313066696c657379737465 N3ghc10filesyste
0x1bcd00 6d313666696c6573797374656d5f6572 m16filesystem_er
0x1bcd10 726f7245000000000000000000000000 rorE............
0x1bcd20 4e386e6c6f686d616e6e31366a736f6e N8nlohmann16json
0x1bcd30 5f6162695f76335f31315f3336646574 _abi_v3_11_36det
0x1bcd40 61696c31326f75745f6f665f72616e67 ail12out_of_rang
0x1bcd50 65450000000000000000000000000000 eE..............
0x1bcd60 4e386e6c6f686d616e6e31366a736f6e N8nlohmann16json
0x1bcd70 5f6162695f76335f31315f3336646574 _abi_v3_11_36det
0x1bcd80 61696c39657863657074696f6e450000 ail9exceptionE..
0x1bcd90 4e5374365f5f6e646b3131376261645f NSt6__ndk117bad_
0x1bcda0 66756e6374696f6e5f63616c6c450000 function_callE..
0x1bcdb0 4e386e6c6f686d616e6e31366a736f6e N8nlohmann16json
0x1bcdc0 5f6162695f76335f31315f3336646574 _abi_v3_11_36det
0x1bcdd0 61696c3136696e76616c69645f697465 ail16invalid_ite
0x1bcde0 7261746f724500000000000000000000 ratorE..........
0x1bcdf0 4e386e6c6f686d616e6e31366a736f6e N8nlohmann16json
0x1bce00 5f6162695f76335f31315f3336646574 _abi_v3_11_36det
0x1bce10 61696c3130747970655f6572726f7245 ail10type_errorE
0x1bce20 00000000000000000000000000000000 ................
0x1bce30 4e386e6c6f686d616e6e31366a736f6e N8nlohmann16json
0x1bce40 5f6162695f76335f31315f3336646574 _abi_v3_11_36det
0x1bce50 61696c313170617273655f6572726f72 ail11parse_error
0x1bce60 45000000000000000000000000000000 E...............
0x1bce70 00000000000000000000000000000000 ................
0x1bce80 00000000000000000000000000000000 ................
0x1bce90 00000000000000000000000000000000 ................
0x1bcea0 00000000000000000000000000000000 ................
0x1bceb0 00000000000000000000000000000000 ................
0x1bcec0 00000000000000000000000000000000 ................
0x1bced0 00000000000000000000000000000000 ................
0x1bcee0 00 .
0x1beeb1 206279746573002323496e69004d656d bytes.##Ini.Mem
0x1beec1 6f727920616c6c6f636174696f6e7300 ory allocations.
0x1beed1 526563656e74206672616d6573207769 Recent frames wi
0x1beee1 746820616c6c6f636174696f6e733a00 th allocations:.
0x1beef1 4672616d6520253036643a20252b3364 Frame %06d: %+3dPercent-encoded content decoded
0x1bef01 202820253264206d616c6c6f632c2025 ( %2d malloc, %
0x1bef11 32642066726565202925730020286d6f 2d free )%s. (mo
0x1bef21 737420726563656e7429004b4559424f st recent).KEYBO
0x1bef31 4152442f47414d455041442f4d4f5553 ARD/GAMEPAD/MOUS
0x1bef41 45204b455953004b65797320646f776e E KEYS.Keys down
0x1bef51 3a00222573222025640028252e303266 :."%s" %d.(%.02f
0x1bef61 29004b65797320707265737365643a00 ).Keys pressed:.
0x1bef71 4b6579732072656c65617365643a004b Keys released:.K
0x1bef81 657973 eys

Well-known

Micro-behaviors

Metadata

Identity

SHA-256 59020a17aa709099c1a62486786f68f6b2442694ac22c224c0283b7d3aa10276
Filename libReverseSigma.so
Package 59020a17aa709099c1a62486786f68f6b2442694ac22c224c0283b7d3aa10276

Origin

Source harvest
Feed malshare
Domain malshare.com

Timeline

First seen 11 Aug 2026 11:08 UTC
First analyzed 11 Aug 2026 16:44 UTC
Last analyzed 12 Aug 2026 17:22 UTC
Last updated 12 Aug 2026 17:22 UTC

Labeling

Label bad
Label source cyclotron:sighted
Traits version 73866