MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 337b3501a8e5c0c935204ab5382717f41f3d97eb0b1d8c09884f8126220b0ca5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 5

Intelligence 5 IOCs YARA 1 File information Comments

SHA256 hash:	337b3501a8e5c0c935204ab5382717f41f3d97eb0b1d8c09884f8126220b0ca5
SHA3-384 hash:	8272fa4fdce3789f00a069619eb8d9c02303b1ba6f8f5f26966e42c6c24ac74be022a99ad215781608e8e4b03588effc
SHA1 hash:	2ea1f454660a4c556d0b87c1aaf628188a243675
MD5 hash:	7269c1ba93d554e183b39a5b31e3aea8
humanhash:	east-black-sodium-timing
File name:	ip6addrd
Download:	download sample
Signature	Mirai Create hunting rule
File size:	2'077'504 bytes
First seen:	2026-02-07 10:54:40 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	49152:RrVLWf0+oVeZaSBhjmnXupr9r3rY3QwrWW265rg:RrdW8+6ABhjuupJrY3rT2gg
TLSH	T1C6A533EF410337178B2B9A75054252FECB0DBEE7CA76A2A49E29178ECD3235D2C04791
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf UPX

UPX packed

This file is packed with UPX. We have therefore unpacked the file. Below is furhter information about the unpacked (de-compressed) file.

File size (compressed) :	2'077'504 bytes
File size (de-compressed) :	7'733'432 bytes
Format:	linux/arm64
Unpacked file:	b334d00076ef49df1f3975044b7fb08f7e81e18768fb6ed65ef20fa46edf7cfe

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Details

Link:

https://research.acce.ciphertechsolutions.com/results/621ca2cf-0dea-415b-a174-921006719620/

Result

Gathering data

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/12dc7711-4f61-4469-a85e-2418e04eeb90

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/2fcaef21-1bec-4b33-8467-105a5c2eb045

Result

Threat name:

n/a

Detection:

suspicious

Classification:

evad

Score:

24 / 100

Link:

https://www.joesandbox.com/analysis/1865172

Signature

Sample is packed with UPX

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/337b3501a8e5c0c935204ab5382717f41f3d97eb0b1d8c09884f8126220b0ca5

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/337b3501a8e5c0c935204ab5382717f41f3d97eb0b1d8c09884f8126220b0ca5/

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gn5tkani4xamsnjajk2tqjyx6qpt3f7lbmoyycmij6asmiqlbssq._file

Result

Malware family:

n/a

Score:

5/10

Tags:

discovery linux upx

Link:

https://tria.ge/reports/260207-m1bl9abx6g/

Behaviour

System Network Configuration Discovery

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/337b3501a8e5c0c935204ab5382717f41f3d97eb0b1d8c09884f8126220b0ca5

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.