MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1216bbbcd4d0f59fa900f7ad23f3bcb3612d57a05b9de6962c7d9d9b77fe5f80. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments

SHA256 hash: 1216bbbcd4d0f59fa900f7ad23f3bcb3612d57a05b9de6962c7d9d9b77fe5f80
SHA3-384 hash: a930c439eb1caf11e8bde71a023f041b423b15eaa3d03d3d1e2b96c3be7410dfdfbb92761ea916570d596624693d13da
SHA1 hash: 0f26139bd91773f9c01345ea28db6dea4840cca2
MD5 hash: 1dd028756528e1016baff61641ee4f36
humanhash: july-connecticut-august-alabama
File name:m68k
Download: download sample
Signature Mirai
File size:92'104 bytes
First seen:2025-11-09 17:21:36 UTC
Last seen:2025-11-11 02:21:02 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:KwbDsMzyUqhzXQIzMpqCQvQ8iny1PgylqK1Pezp+Sk4wSKuRhje6u0:KwcyjqNAIzMpqCQvay1Pge1W9vKuRhjb
TLSH T112935CA1FC02EEBEF40FD77B44534D19B731A36125931E397393BA27A8351A94863E81
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
4
# of downloads :
116
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
mirai
Verdict:
Malicious
File Type:
elf.32.be
First seen:
2025-11-09T13:57:00Z UTC
Last seen:
2025-11-11T10:18:00Z UTC
Hits:
~10
Detections:
HEUR:Backdoor.Linux.Mirai.b
Status:
terminated
Behavior Graph:
%3 guuid=da950553-1a00-0000-122a-b37142080000 pid=2114 /usr/bin/sudo guuid=c1a09f54-1a00-0000-122a-b37146080000 pid=2118 /tmp/sample.bin guuid=da950553-1a00-0000-122a-b37142080000 pid=2114->guuid=c1a09f54-1a00-0000-122a-b37146080000 pid=2118 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1810981 Sample: m68k.elf Startdate: 09/11/2025 Architecture: LINUX Score: 48 12 109.202.202.202, 80 INIT7CH Switzerland 2->12 14 91.189.91.42, 443 CANONICAL-ASGB United Kingdom 2->14 16 2 other IPs or domains 2->16 18 Multi AV Scanner detection for submitted file 2->18 6 dash rm 2->6         started        8 dash rm 2->8         started        10 m68k.elf 2->10         started        signatures3 process4
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2025-11-09 17:22:17 UTC
File Type:
ELF32 Big (Exe)
AV detection:
13 of 24 (54.17%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai linux
Verdict:
Malicious
Tags:
Unix.Trojan.Mirai-6981989-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 1216bbbcd4d0f59fa900f7ad23f3bcb3612d57a05b9de6962c7d9d9b77fe5f80

(this sample)

  
Delivery method
Distributed via web download

Comments