MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ea52fd9a678a89f41f1e68ea40e90fdbddec6e3af132c0415c6a62fa85dcdf1d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ea52fd9a678a89f41f1e68ea40e90fdbddec6e3af132c0415c6a62fa85dcdf1d
SHA3-384 hash:	59033e6115467c66a9b3a0c56eb2040ac1146966520c3e80e8aeb08930664b8dd3d16bd4c91fca97d04981770609e7b8
SHA1 hash:	6b43895f3fb852bde21124ca7a7c39fa7cd9db85
MD5 hash:	e9f12276ffc76b19f5afcf06facab1e1
humanhash:	freddie-zebra-coffee-double
File name:	ppc
Download:	download sample
File size:	104'256 bytes
First seen:	2025-05-15 13:22:20 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:9roGHNTUZN1MIBUiCxfytiteQInJ7abwko7lj0JvAhhHr5+5uQfqIcvd:nmZUiCx5t26wN7lDhLvd
TLSH	T189A32906731C0947D2633EF4363F67E193EF9A8121E4F640251F9B8A96B1E325486EDD
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

105

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Trojan.Mirai-10012200-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10012201-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10012671-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6825ebbb4a59e5a2ce04ca67linux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6825ead6bff72ff46b647e07/reports/54367e7c-a68b-4c52-abd6-65b583a8e927/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/010fc0c7-3ca7-4f3a-ac9d-6116723a2f3d

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1690860

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/ea52fd9a678a89f41f1e68ea40e90fdbddec6e3af132c0415c6a62fa85dcdf1d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ea52fd9a678a89f41f1e68ea40e90fdbddec6e3af132c0415c6a62fa85dcdf1d/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-15 13:23:22 UTC

File Type:

ELF32 Big (Exe)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5jjp3gthrke7ihy6ndveb2ip3po6y3r26ezmaqk4njrpvbo434oq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250515-qm1wrshj6v/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-10012200-0

YARA:

n/a

Link:

https://app.threat.zone/submission/89398017-d100-4a3c-8708-4e21732984f8

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ea52fd9a678a89f41f1e68ea40e90fdbddec6e3af132c0415c6a62fa85dcdf1d