MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 013e3d0d6b24ac832fefab30c0906b0e6e39ef9c2aea310ff2729cb3509cfd08. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 10


Intelligence 10 IOCs YARA File information Comments

SHA256 hash: 013e3d0d6b24ac832fefab30c0906b0e6e39ef9c2aea310ff2729cb3509cfd08
SHA3-384 hash: d274a94523e4c3ad6dd8e02b8928673deb817e72cf7c8a0a27ade4dae6ff90884667158cd6a9354fe9efbe70cf58ea2b
SHA1 hash: 81279fc56d97dfd17f194f2a0694e2290758c30b
MD5 hash: b0a742dab60c4cab16e8679c5c7495c4
humanhash: kansas-jupiter-ten-music
File name:spc
Download: download sample
Signature Mirai
File size:88'580 bytes
First seen:2025-11-08 12:04:23 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:Eeq8buV0D8Imq7A2yWtWwOt5RXXAhsPtPyMGv:LdbuOA6Qd/lhA
TLSH T1D4833A22B9361D27C5C468BB22F34725F2F6538A35E8CA0E7D620D4EBF256503187AF5
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
94
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
gafgyt mirai
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2025-11-08T09:12:00Z UTC
Last seen:
2025-11-10T04:50:00Z UTC
Hits:
~10
Detections:
HEUR:Backdoor.Linux.Mirai.b
Status:
terminated
Behavior Graph:
%3 guuid=82614ecf-1a00-0000-244b-7445e30b0000 pid=3043 /usr/bin/sudo guuid=275763d1-1a00-0000-244b-7445ea0b0000 pid=3050 /tmp/sample.bin guuid=82614ecf-1a00-0000-244b-7445e30b0000 pid=3043->guuid=275763d1-1a00-0000-244b-7445ea0b0000 pid=3050 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1810483 Sample: spc.elf Startdate: 08/11/2025 Architecture: LINUX Score: 48 12 109.202.202.202, 80 INIT7CH Switzerland 2->12 14 91.189.91.42, 443 CANONICAL-ASGB United Kingdom 2->14 16 2 other IPs or domains 2->16 18 Multi AV Scanner detection for submitted file 2->18 6 dash rm 2->6         started        8 dash rm 2->8         started        10 spc.elf 2->10         started        signatures3 process4
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2025-11-08 12:05:20 UTC
File Type:
ELF32 Big (Exe)
AV detection:
12 of 24 (50.00%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 013e3d0d6b24ac832fefab30c0906b0e6e39ef9c2aea310ff2729cb3509cfd08

(this sample)

  
Delivery method
Distributed via web download

Comments