MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c
SHA3-384 hash:	f8b1c0c630ebfcbcac2a86a8240e920f9b15012a120918a73981d3fc104368ed6678c2bc594bbf6d36f553b2151d56f6
SHA1 hash:	4a7bd5a6c9bedb63f4a74011218401424f4eb7b8
MD5 hash:	164b959e65ea2132a07e0ed573375239
humanhash:	music-east-carbon-uranus
File name:	mips
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	222'396 bytes
First seen:	2025-11-24 06:20:34 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	3072:TYKSKkcRW8y4iEaR6mjHN/kjAf44Ay3YKRpHmOaWNnzR7:TYfcRW8y4iEa8EN/kjA6cYSp7aWNz9
TLSH	T1D024A51E6E228F6DF768873047B79E21975C33D636E1CA45E1ACC6101E6039E641FFA8
telfhash	t100418f580e7807f0a3256c9d199dff7ad6a330db3e126c378e51e46aab69e834d10c0c
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 7981a49164b986125277c2148e5e7c595dada33adce84cfb4e89ea5b757cb5da

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

80

Origin country :

NL

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Trojan.Mirai-8041698-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10017641-0

Alert

Create hunting rule

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Connection attempt

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6923f95ee5743ce589e7ac0c/reports/228c7f92-e453-418c-aa9b-be57fc5ac208/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-11-24T04:32:00Z UTC

Last seen:

2025-11-26T00:53:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/19e74f70-cafb-4cec-878e-211fb403e05e

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/4b3d7a66-e504-41ad-95c2-098940b77753

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1819761

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-24 07:10:40 UTC

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hafx3zrgcsfyomh36rlmtmizgdhb622waznksbtgc5wuwfq45foa._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai discovery

Link:

https://tria.ge/reports/251124-g4gpsayqax/

Behaviour

System Network Configuration Discovery

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-8041698-0

YARA:

n/a

Link:

https://app.threat.zone/submission/c0f54d87-e557-4968-a6f1-55fd6f3b5540

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/380b7de626148b8730fbf456c9b11930ce1f6b56065aa90666176d4b161ce95c