MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2e69f1305c1c6f89ac5f6d21acd95fa12394018985e733cf486333051707d257. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2e69f1305c1c6f89ac5f6d21acd95fa12394018985e733cf486333051707d257
SHA3-384 hash:	b0f00ea3691727ffbc18d8379e2b70cdfad1036175e6735b4140ebd45a95f501c1285e54d997b98bd2507ea42403c670
SHA1 hash:	fe2a986818543e19da89202d5678dd5d2e3f937a
MD5 hash:	f201a3b8b40f34627ad937372ec7bed6
humanhash:	cardinal-don-october-mexico
File name:	splx86
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	79'936 bytes
First seen:	2025-12-28 14:32:26 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:F2nWeYclWwC5w29HOScM97TLx/3CH9c9KwBuPStABZS3luWhHPuf5h7AQQ4SD/R0:F2W7clWwYlXTR3xfCHe981B43UwvuBG0
TLSH	T19D734BC6EA43D4F6ED0609305173EB379672E5351135EE83D7E9EA32B852A01E90B39C
telfhash	t1b431b3f52dbf08e8b7d06c1c921e6e613e6ad677295076a145f3a93122e7d0260a6c38
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

39

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31075.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-7755770-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9857931-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9866113-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9885259-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10008934-0

Alert

Create hunting rule

Unix.Trojan.Gafgyt-6735924-0

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/69513fa984afa5547b5f23f7/reports/6095fc4f-00b7-4315-913e-fdbd1ccc0c72/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/1cd557ac-ecf2-4213-9b1d-fded1c735ec6

Behavior Graph:

Download SVG

Intezer Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/fd96d09c-d65f-4487-8ae6-ab83b29db5ef

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj

Score:

72 / 100

Link:

https://www.joesandbox.com/analysis/1840805

Signature

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/2e69f1305c1c6f89ac5f6d21acd95fa12394018985e733cf486333051707d257

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/2e69f1305c1c6f89ac5f6d21acd95fa12394018985e733cf486333051707d257/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-28 14:33:17 UTC

File Type:

ELF32 Little (Exe)

AV detection:

16 of 36 (44.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fzu7cmc4drxytlc7nuq2zwk7uerziamjqxttht2immzqkfyh2jlq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  9/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/251228-rwyy7swphj/

Behaviour

Reads runtime system information

Changes its process name

Reads system network configuration

Enumerates active TCP sockets

Enumerates running processes

Modifies Watchdog functionality

Renames itself

Unexpected DNS network traffic destination

Contacts a large (62156) amount of remote hosts

Creates a large amount of network flows

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-7755770-0

YARA:

n/a

Link:

https://app.threat.zone/submission/7934e810-4198-4d02-a12d-3c4a7ba06de5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.