MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 059dee77e389d2422f46e38313c53957f721887b558583463f2e8defe6e7c90e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 11


Intelligence 11 IOCs YARA File information Comments

SHA256 hash: 059dee77e389d2422f46e38313c53957f721887b558583463f2e8defe6e7c90e
SHA3-384 hash: 3f27c7f6b80c97033bde1793ce2e818a2b6e92baeb6053819a3f6eddfe8705515364032d707925a19e54fb278338415c
SHA1 hash: 89fe79d2f35835582433e5d155cb1585ab7442a9
MD5 hash: dd5c9f4da2cefbc7ca35290d436ea3e6
humanhash: xray-pluto-december-quebec
File name:spc
Download: download sample
Signature Mirai
File size:64'320 bytes
First seen:2025-02-26 21:08:31 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:IDK6bb9lTEFq1X6JySbe7MRTbrv0kv1pdYm+A:mKQ27be7MRTc01N
TLSH T1AF534A217A792E17C4E4A07E25B38328B6E5678E32B8C65D7C723F4EFF1066064171B6
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
98
Origin country :
DE DE
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
56 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1625244 Sample: spc.elf Startdate: 26/02/2025 Architecture: LINUX Score: 56 18 209.31.82.156 XO-AS15US United States 2->18 20 40.132.109.186 WINDSTREAMUS United States 2->20 22 98 other IPs or domains 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 8 spc.elf 2->8         started        signatures3 process4 process5 10 spc.elf 8->10         started        12 spc.elf 8->12         started        process6 14 spc.elf 10->14         started        16 spc.elf 10->16         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-02-26 21:09:13 UTC
File Type:
ELF32 Big (Exe)
AV detection:
17 of 24 (70.83%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:kurc linux
Verdict:
Malicious
Tags:
Unix.Dropper.Mirai-7135870-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 059dee77e389d2422f46e38313c53957f721887b558583463f2e8defe6e7c90e

(this sample)

  
Delivery method
Distributed via web download

Comments