MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f54215739170aecf9ec3f877c8aa89c344bd421276b0e0c2e0d9cc4fb6b9068. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1f54215739170aecf9ec3f877c8aa89c344bd421276b0e0c2e0d9cc4fb6b9068
SHA3-384 hash:	e682b4f8ad3ce1dbe3084757ce2486c0f22d2a19ba38dbd17b0b399e2bd0a0aa78cd3de97dca3a5b15c8296a0ec0672e
SHA1 hash:	64ef98bc44e3e59bab5d6761d826ea215986830a
MD5 hash:	fd708e234ac35274d119b655995e644a
humanhash:	william-kansas-shade-beer
File name:	na
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	186'166 bytes
First seen:	2026-02-03 15:56:08 UTC
Last seen:	2026-02-03 16:29:31 UTC
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	3072:ozdurayQy5HEcMf3oCadVen5qbyQvi7Nsq2u5AGJdcqCf/LE:ozdurafekcMwCQeQq7NsJu5BJuDE
TLSH	T13D04F141FB09152BE9E34FB44E3B2F21933E48A624A7D1186609FB130E73E7A565B7C4
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

26

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Connection attempt

DNS request

Runs as daemon

Kills processes

Creating a file

Creating a process from a recently created file

Traces processes

Substitutes an application name

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/69821ab1b6bd365f0a69ef36/reports/963b1201-38d2-4665-9b52-fbd6aa8e1e72/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

Link:

https://opentip.kaspersky.com/1f54215739170aecf9ec3f877c8aa89c344bd421276b0e0c2e0d9cc4fb6b9068/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/7d774c53-5440-44ba-b16e-cd49a86997ad

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/94812e62-6512-4ea7-b74f-7b44a44b5a84

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1862566

Signature

Multi AV Scanner detection for submitted file

Spawns processes using file descriptor names (likely to hide the executable path or fileless malware)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/1f54215739170aecf9ec3f877c8aa89c344bd421276b0e0c2e0d9cc4fb6b9068

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1f54215739170aecf9ec3f877c8aa89c344bd421276b0e0c2e0d9cc4fb6b9068/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-03 15:13:05 UTC

File Type:

ELF32 Big (SO)

AV detection:

4 of 36 (11.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=d5kccvzzc4foz6pmh6dxzcvitq2exvbbe5vq4dbobwomj63lsbua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260203-tdq7ragz9d/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.