MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3708ee6f195c922af1fca70d163e1d443b731c4756ecf90190b23d93ef2cd26f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3708ee6f195c922af1fca70d163e1d443b731c4756ecf90190b23d93ef2cd26f
SHA3-384 hash:	2da567a3eea2fc3c02d4da40b80008a8ff958bd24f2f8534b1dbe07f8f8663c6df826ecc812fe9e77309457df1d9836e
SHA1 hash:	59a9df58daa37dc64e36e45caca65982d3afa630
MD5 hash:	b0d2ae1e8f187fccdb1957eb556d589f
humanhash:	fifteen-summer-fruit-west
File name:	jew.mpsl
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	84'172 bytes
First seen:	2025-12-02 03:30:52 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:bw4pjQLOQ2GTZHslkJGAopJpPok9Z5ztyRd42+B:bw4pjWQAFslok92
TLSH	T115839316BF601FF7EC9ACC338AA91705289D611E31A93B75B830D428F25B25F15E39B0
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

ACCE Mirai_Botnet_XOR_Lookup

Malware configuration found for:

Mirai

Details

Mirai

an XOR decryption key and at least a c2 socket address

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135939-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7136025-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9964459-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/692e5d8fc1a2f55fb9c4fa3d/reports/604f3806-408c-446f-a74c-100cc0affe66/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/e444a063-ffc3-4523-bdad-aea923f4d899

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/9c7d6661-8684-4653-83df-37d70d2b3451

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1824093

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/3708ee6f195c922af1fca70d163e1d443b731c4756ecf90190b23d93ef2cd26f

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/3708ee6f195c922af1fca70d163e1d443b731c4756ecf90190b23d93ef2cd26f/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-02 03:31:35 UTC

File Type:

ELF32 Little (Exe)

AV detection:

23 of 36 (63.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=g4eo43yzlsjcv4p4u4grmpq5iq5xghchk3wpsamqwi6zh3zm2jxq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:kurc defense_evasion discovery

Link:

https://tria.ge/reports/251202-d285gawkgy/

Behaviour

Changes its process name

Writes file to system bin folder

Modifies Watchdog functionality

Contacts a large (93772) amount of remote hosts

Creates a large amount of network flows

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Dropper.Mirai-7135870-0

YARA:

n/a

Link:

https://app.threat.zone/submission/dc95862b-8bcd-48c4-94ea-f1898645309c

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3708ee6f195c922af1fca70d163e1d443b731c4756ecf90190b23d93ef2cd26f