MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 9

Intelligence 9 IOCs YARA 1 File information Comments

SHA256 hash:	3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb
SHA3-384 hash:	6345399993691d4031a555d6c46066e90e05688a23c2a523857203f8ee3d1c4d34075558e3f3868c996e7791cf0a4248
SHA1 hash:	22ff1f87ece20a18f32756a85199734a067cd117
MD5 hash:	b4358ee44b7650bbb29d8873b40bdc2a
humanhash:	beryllium-glucose-indigo-mars
File name:	arm5
Download:	download sample
Signature	Mirai Create hunting rule
File size:	25'876 bytes
First seen:	2026-02-24 01:34:14 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:ivwcVP4oHWfu1hAMjLqkxBBmes3Uoz/k5E:ivwSwgz1hAVkbcDzM5E
TLSH	T13FC2E0785877A5B2E3201E7B79B5975B37FB07B8CEF925332514972823C41CA28F4982
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai UPX

UPX packed

This file is packed with UPX. We have therefore unpacked the file. Below is furhter information about the unpacked (de-compressed) file.

File size (compressed) :	25'876 bytes
File size (de-compressed) :	56'836 bytes
Format:	linux/arm
Unpacked file:	8c52016acab3812686ebf0da44a812f0ad6e8b3ff8fb9d703be2ba840527e5fc

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Details

Link:

https://research.acce.ciphertechsolutions.com/results/6d13aff3-17bb-445e-bedd-1115d54514c4/

Detection(s):

SecuriteInfo.com.Linux.Mirai-18.UNOFFICIAL

Unix.Trojan.Mirai-8274771-0

Result

Verdict:

Malware

Maliciousness:

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

mirai packed upx

Link:

https://www.filescan.io/uploads/699d005710e80629d4ef534d/reports/1a4d1af4-1540-4a8b-958d-9e52c5e551c8/overview

Verdict:

Malicious

File Type:

elf.32.le

Link:

https://opentip.kaspersky.com/3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/2b877593-9498-4bef-b7e2-ac36ef32ae54

Behavior Graph:

Download SVG

Malware family:

Mirai

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/1d94d5e5-f2c7-4305-93e2-d53e9b04d46f

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2026-02-24 01:35:27 UTC

File Type:

ELF32 Little (Exe)

AV detection:

13 of 24 (54.17%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gjura7glzcf2vuh4m76n3x5zlbq77d466mckpo2njjecansij3nq._file

Result

Malware family:

n/a

Score:

5/10

Tags:

upx

Link:

https://tria.ge/reports/260224-bztkwshw7h/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3269107ccbc88baad0fc67fcdddfb95861ff8f9ef304a7bb4d4a482036484edb

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.