MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77
SHA3-384 hash:	ccc6724b0f648256351d5958856610f1453b1f1225cedd546bb233ca52f4ff11240c16878de3d8ad94afff7f778068b4
SHA1 hash:	2d0728594a044be25b79a09843077db86f070d2b
MD5 hash:	81021989c4833e0dd594b005b1d60fbb
humanhash:	bakerloo-august-uncle-oregon
File name:	violetppc
Download:	download sample
File size:	22'500 bytes
First seen:	2026-03-14 08:22:29 UTC
Last seen:	2026-03-14 15:12:54 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	384:jlDNhLEb4WcaQdRShVRg/1ZaUP8SOrCmg6ATqGdlN7S0gatyyd:zWRQdRS7KOBrCm7AeGPJS3Q
TLSH	T104A2E856A20E0997C8671E703E3EB3DC971FAED522D4D189300E9E4A82BAD32514DDDF
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

116

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Siggen.11685.10469.30500.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/69b51af3493cb7d62dfc8032/reports/88ed7aa9-822e-4eb9-bd70-8aceba3497ea/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

Link:

https://opentip.kaspersky.com/d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5af69df9-8370-410b-82ee-aeec9b17fa56

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/2ff7b9f9-e692-4253-8eb0-ff142976c794

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1883640

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-03-14 08:23:18 UTC

File Type:

ELF32 Big (Exe)

AV detection:

8 of 24 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2oj2g75zmd423nzeh253hdz6dgeqxm42axxdrhnkz4r75x3m3n3q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260314-j98rkabs3z/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d393a37fb960f9adb7243ebbb38f3e19890bb39a05ee389daacf23fedf6cdb77