MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f0eaf804cf3e6ace71c1cc3c8eea1a2c85f1b4a4a4d295a69308452f98f09ec8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f0eaf804cf3e6ace71c1cc3c8eea1a2c85f1b4a4a4d295a69308452f98f09ec8
SHA3-384 hash:	29caa9e0352c0803f435e0d57222a2b464119ac2cda01d53aefe1d55179acb0f98091bbfcb4a696e624e3b5124682c5a
SHA1 hash:	eea88e5a215401a7167749685182544ea7f4afbb
MD5 hash:	6a11f49f76232804f45cbd9e43c77300
humanhash:	princess-batman-carolina-south
File name:	spc
Download:	download sample
File size:	45'400 bytes
First seen:	2025-04-21 00:23:32 UTC
Last seen:	2025-04-21 08:37:36 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	768:ekgoKuq9oBUa8CmI4jFweZefz25Tjpd/mU2JIOaERkv1peEjq0GGOmW:ekgeSoBt8CmI8FweZefy5Tjpd/mJSOxd
TLSH	T13F13093634387922F6E2B05E0D3B9746B1D17E0D71A0D367BC722E5BDE20241BA6217B
Magika	elf
Reporter	abuse_ch
Tags:	elf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

120

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68059074280f5f89a0d28b6flinux22vpnfull_triage

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6805902690767142c3dcc253/reports/6dc28f8b-0a23-4bd2-adf7-0a92a8a009b6/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/c4bad1b0-4507-417c-8a5f-d27f24f78e65

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1670025

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/f0eaf804cf3e6ace71c1cc3c8eea1a2c85f1b4a4a4d295a69308452f98f09ec8

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f0eaf804cf3e6ace71c1cc3c8eea1a2c85f1b4a4a4d295a69308452f98f09ec8/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-04-21 00:24:13 UTC

File Type:

ELF32 Big (Exe)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6dvpqbgphzvm44obzq6i52q2fsc7dnfeutjjljutbbcs7ghqt3ea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250421-ap437szkt9/

Threat.Zone Informative

Verdict:

Informative

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/b9ad5799-44a5-4b40-8724-546f70ca00eb

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f0eaf804cf3e6ace71c1cc3c8eea1a2c85f1b4a4a4d295a69308452f98f09ec8