MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6
SHA3-384 hash:	d3191ff732bcbf84ab55258c7f96bd654f944a01ee6e9a8cebf8c6d007574fdb097b5f0d1bcb77a3b17c109e9fca4e61
SHA1 hash:	c6fedc5eabb05fecbf66a27b3eff6228ccdea72f
MD5 hash:	8489b73482c0cc4ec3a4015b42fb325c
humanhash:	network-thirteen-robin-carolina
File name:	arm5
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	66'904 bytes
First seen:	2025-06-19 21:46:22 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:iMn8fR3fLcuQNuIqtYTJjxOQrs5dsVw/W/YIBQkNKRr:eVwukMFuVw/W/h1KF
TLSH	T178631A52B8809B66D5E056BAFE0E018D33531FF4E2DE72068D15BB3077ABD4A0EBB541
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30456.LC.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-9853181-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9854559-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9885101-0

Alert

Create hunting rule

Unix.Malware.Mirai-9896989-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9899908-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68548547c0425dfc161b1ab6linux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Creating a file

Sends data to a server

Connection attempt

Sets a written file as executable

Launching a process

Creates directories

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

lolbin remote

Link:

https://www.filescan.io/uploads/6854855a3faf8fcd7d370a4a/reports/fbcaf01f-d9c8-473b-9d3e-0c540f9ecbff/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

arm

Packer:

not packed

Botnet:

unknown

Number of open files:

39

Number of processes launched:

7

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/8fd21fd3-534b-4c42-956c-946a45dddf9d

Behavior Graph:

Download SVG

Intezer Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/557a988a-64fd-4ecd-9eb6-fa9a38974b5a

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1718918

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-19 21:47:33 UTC

File Type:

ELF32 Little (Exe)

AV detection:

18 of 24 (75.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=haf5zzryivo3bj45yhip5p73j5kjs3745yznn35ymmgzuhro5o3a._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery

Link:

https://tria.ge/reports/250619-1m63wscj7s/

Behaviour

Reads runtime system information

File and Directory Permissions Modification

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9853181-0

YARA:

n/a

Link:

https://app.threat.zone/submission/cbe236f8-1c0e-4648-a57a-1fc0dbc06253

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/380bdce638455db0a79dc1d0febffb4f54996ffcee32d6efb8630d9a1e2eebb6