MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85
SHA3-384 hash:	9728f86156ee85eae26c762be2bee0d88934bba1f95b92dd1d00253f0ff7c01ccd12d615117528994c266ec974f5f6f7
SHA1 hash:	33abb9738eae3f27c7df387eb6f1226be7efa3e8
MD5 hash:	63080e51ea8c451d23d2ff279e7c6c76
humanhash:	six-two-sad-speaker
File name:	87sbhas6as.mips
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	52'216 bytes
First seen:	2025-12-23 20:48:29 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:1IaEEr7yyGjxJew5ZCQYZYpZ8M+XbF5A3O5hZ/l2F5rygaYz:1HFVGjxXCMEr85XaYz
TLSH	T14833840E2E268FECF759C63587BB8D65A34C338736A1D681E26CD6011E5024E605FFB8
telfhash	t1dcf0bd2c8d7423d497365ca5187debb7e5a031ed17266c274e51bd7caa6c9425d00c0c
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 4adf7e437eb11c1f470db0b4e24e56c9c2d796e03f4b4701d81d3aa353abab8e

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

79

Origin country :

NL

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30455.LC.BadVar.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-9858729-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9951087-0

Alert

Create hunting rule

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-12-23T18:48:00Z UTC

Last seen:

2025-12-24T15:01:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/82c64fc6-3a4d-4ae9-a335-234c0e3a9107

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/4357c0c4-40c8-492a-83f6-b1110804a7b5

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1838442

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-23 20:49:16 UTC

File Type:

ELF32 Big (Exe)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ekxoawy2zz2f6bmblzsqmttipnmnrqupcfrtuo2o2feoizeytocq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery

Link:

https://tria.ge/reports/251223-zl59jasnb1/

Behaviour

System Network Configuration Discovery

Changes its process name

Writes file to system bin folder

Modifies Watchdog functionality

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9858729-0

YARA:

n/a

Link:

https://app.threat.zone/submission/b8617778-722d-46a9-a876-157ef2ebfbbc

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/22aee05b1ace745f05815e65064e687b58d8c28f11633a3b4ed148e464989b85