MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044
SHA3-384 hash:	55c85d2e5f5ea1f13b5b0848482119d917e37e4484a714e3fd1e0a623d196696e451aa98d3fafffa6086ef1bfb37cb1b
SHA1 hash:	3392b8294951e74d8ba4822511827a7c55e4dea3
MD5 hash:	f5a8e1a8131169ced641c4d881ab353f
humanhash:	vermont-whiskey-fish-tango
File name:	ppc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	63'584 bytes
First seen:	2025-11-01 16:58:46 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:5zct1AHrk2di4xBqmW4M9mrIkKVRkQi5FNitSqWHqZXKIO/:xct1X4dimWXmkkKV+QYigtHqZXKH/
TLSH	T19B533C42B31C0957D5B69DB0253F23E0D3BBE95020F4B688255E9B8A9371E3255C6FCE
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 cf00a56ec337b2d65c683a3ff6e573292225e03810ddeda2846c1e155070c0d2

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

116

Origin country :

NL

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135957-0

Alert

Create hunting rule

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Connection attempt

DNS request

Receives data from a server

Opens a port

Sends data to a server

Substitutes an application name

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/69063c82be20d933485af234/reports/88fb883f-f115-49a8-868f-2b87d2baed9d/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-11-01T14:09:00Z UTC

Last seen:

2025-11-02T02:09:00Z UTC

Hits:

~10

Detections:

HEUR:Backdoor.Linux.Mirai.b

Link:

https://opentip.kaspersky.com/0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6a003745-1e35-4d44-a930-7ccfbb27b1e1

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/07c22bbd-7774-4bc4-8bac-409b31c6d7a5

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj

Score:

64 / 100

Link:

https://www.joesandbox.com/analysis/1806308

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-01 16:59:42 UTC

File Type:

ELF32 Big (Exe)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=b2pkjp7wh3egote53lawm7edubea7rtrtbaru5ojuhaprdmaybca._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai linux

Link:

https://tria.ge/reports/251101-vhr6aadr9z/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0e9ea4bff63ec8674c9ddac1667c83a0480fc67198411a75c9a1c0f88d80c044