MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74
SHA3-384 hash:	bc145c84b12b7185fb142e58e2b6568ae33b1621d4e7cdf8293850e065adbf180831fe5a215ef480bf415c491217196c
SHA1 hash:	0099fd6d15b9b9e55d32b007258d970908108714
MD5 hash:	ff2f05cde3244481fdbdde5ca88adddd
humanhash:	kitten-coffee-kansas-purple
File name:	dlr.x86_64
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'688 bytes
First seen:	2025-12-06 07:28:35 UTC
Last seen:	2025-12-06 09:24:13 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24:GHOpHZAXmJSu2gdW20Amljh0aVxJwD6nujoxcozffTTqf:GH4ZYMk20AmJG8wD6usxLzXy
TLSH	T13F313306EF1BB47CF81691FD896703F69E21B8EC23397642AE0959020C0A9E0189C491
telfhash	t15aa00254b19938cc9fe7a4157b5efb2b60003a9d05123652c842c8f76d653bd7cd8514
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

39

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.HEUR.Trojan-Downloader.Linux.Mirai.d.2188.24758.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6933db55bba50eaf04241ae3/reports/870e5722-0bcc-4091-b876-386502f0b5b6/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.64.le

First seen:

2025-12-06T06:30:00Z UTC

Last seen:

2025-12-06T15:51:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/b01f914a-7547-45a8-9e65-7881c9dcf6b5

Intezer Generic Malware

Malware family:

Generic Malware

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/021b9fcf-93f4-4a36-b119-633e9b1b9881

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1827869

Signature

Malicious sample detected (through community Yara rule)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-06 07:14:54 UTC

File Type:

ELF64 Little (Exe)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fk4pzdcm5p64xgb7apobofvu5kh3ee3jdlllmutwskktzrbxpz2a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

linux

Link:

https://tria.ge/reports/251206-jbd5ascz4f/

Behaviour

Writes file to tmp directory

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/c362e9e4-7ef3-419f-8511-65a0397c570e

VMRay Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/2ab8fc8c4ceb/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.32

Link:

https://yomi.yoroi.company/submissions/2ab8fc8c4cebfdcb983f03dc1716b4ea8fb213691ad6b6527692953cc4377e74