🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 01afb7ab7ba3a2bb1ee71d8b6d174f3f6951c6cb75b13e64687b99ea1dbea4fb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 01afb7ab7ba3a2bb1ee71d8b6d174f3f6951c6cb75b13e64687b99ea1dbea4fb
SHA3-384 hash: 2bd567f30bdb24a27688611634e1133627f0eaa73cae5cca33a0a1215ab9b334666b9fbe2c1f890e3cd25ce9eafe9619
SHA1 hash: 95e613c8982fee42512f7b48b2a4d499c6e21590
MD5 hash: 8dc093c35ff08c60aa9106bada9f6607
humanhash: kitten-ink-papa-nineteen
File name:ppc
Download: download sample
Signature Mirai
File size:132'344 bytes
First seen:2026-09-22 04:09:22 UTC
Last seen:2026-09-23 03:15:11 UTC
File type: elf
MIME type:application/x-sharedlib
ssdeep 3072:8ODe81ANGJ/JCAXf6ylyaWmiguPAjS6BcQIpzoFC:1e2ANGJ/JCAXf6+deDoGgIOU
TLSH T1B8D35D01FB084963C4435EB05E7B07ABD3664D9118FAE10969097F4A2B33DB795C7BC6
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
2
# of downloads :
67
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Result
Verdict:
Clean
Maliciousness:

Behaviour
Runs as daemon
Connection attempt
Sends data to a server
Receives data from a server
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
gcc
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2026-09-22T02:35:00Z UTC
Last seen:
2026-09-23T01:23:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=de1ce2e5-1c00-0000-7522-cad1a2070000 pid=1954 /usr/bin/sudo guuid=7f0138e9-1c00-0000-7522-cad1a6070000 pid=1958 /tmp/sample.bin guuid=de1ce2e5-1c00-0000-7522-cad1a2070000 pid=1954->guuid=7f0138e9-1c00-0000-7522-cad1a6070000 pid=1958 execve
Threat name:
Linux.Trojan.Generic
Status:
Suspicious
First seen:
2026-09-22 04:10:29 UTC
File Type:
ELF32 Big (SO)
AV detection:
4 of 24 (16.67%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 01afb7ab7ba3a2bb1ee71d8b6d174f3f6951c6cb75b13e64687b99ea1dbea4fb

(this sample)

  
Delivery method
Distributed via web download

Comments