MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 8

Intelligence 8 IOCs YARA 1 File information Comments

SHA256 hash:	1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832
SHA3-384 hash:	4c47bf4cf9da96fab1a88b09dd0e1e9711b9d69951528ea38342ab63803412ea6ce09eb83fbd26b87bc1c2530209b630
SHA1 hash:	f06f276b5cf290bcd3ddcdbe1c000ae4ac3948e8
MD5 hash:	817994ddcd687b3a4958e122ff77cdaa
humanhash:	twenty-lion-orange-failed
File name:	jklm68k
Download:	download sample
Signature	Mirai Create hunting rule
File size:	82'960 bytes
First seen:	2025-12-14 14:39:27 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:bpiBN9IhKDXuL8EBpIdzJ9UEkP8u+bABDxB0iBpy4HOstqTPZb:QBNihbL8EQzJ9UVEb6BlBpy4uKAb
TLSH	T10A834B96E400DD7DF80AD6FB88574F05F525B3145F920F17B66AFDA7A9310888C25E82
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

112

Origin country :

Vendor Threat Intelligence

No detections

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/693ecc521eac7b9b76a9a425/reports/a1a6b8ab-6c14-40cd-929f-24439aa89a5f/overview

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-12-14T11:16:00Z UTC

Last seen:

2025-12-14T13:45:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832/results?tab=lookup

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/53870c11-cc48-4a61-a108-99c080b70488

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/2a49104d-ab41-4c2e-9fa8-1dbf4a395c25

Result

Threat name:

n/a

Detection:

malicious

Classification:

troj

Score:

60 / 100

Link:

https://www.joesandbox.com/analysis/1832520

Signature

Antivirus / Scanner detection for submitted sample

Connects to many IPs within the same subnet mask (likely port scanning)

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832

Detection:

mirai

Link:

https://mwdb.cert.pl/sample/1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832/

Threat name:

Linux.Backdoor.Mirai

Status:

Malicious

First seen:

2025-12-14 14:40:19 UTC

File Type:

ELF32 Big (Exe)

AV detection:

10 of 24 (41.67%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=dk6nedmejzgr2ctjqe5aivevm52eletplifmt4hfeehbvfr5baza._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/251214-r11ctsypbs/

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-6981989-0

YARA:

n/a

Link:

https://app.threat.zone/submission/c7a31d69-86dc-4839-8e5a-7194475ba733

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1abcd20d844e4d1d0a69813a045495677445926f5a0ac9f0e5210e1a963d0832

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.