MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3b8fabc3e2093ee2f50b5558ea732ba4bdd675cef2a92e9f4b697a44335c9547. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 10


Intelligence 10 IOCs YARA File information Comments

SHA256 hash: 3b8fabc3e2093ee2f50b5558ea732ba4bdd675cef2a92e9f4b697a44335c9547
SHA3-384 hash: 78d38466c1d269834fc76e8ab7c85ef5bf5ca309e5f8663d845c034b3362053091a1f7961ffbed30bc800934d3acb1d1
SHA1 hash: ade2b434bf7de9e930aeafb328296145c196ca07
MD5 hash: 0ee89a7d315a8ea652c3fda8d2d3634d
humanhash: venus-uncle-edward-october
File name:boatnet.m68k
Download: download sample
Signature Mirai
File size:53'024 bytes
First seen:2026-02-17 19:39:57 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:BoG7IMHSWSgciVCnXEgc8eh1gBUxCWQ1v7d:4DgcisnXxGu5W+J
TLSH T1373319D6B5019DBCF95BEBBA8413460AF531B7561083063763BBFC53AC362A48E23D91
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
52
Origin country :
DE DE
Vendor Threat Intelligence
Malware configuration found for:
Mirai
Details
Mirai
an XOR decryption key and at least a c2 socket address
Gathering data
Result
Gathering data
Verdict:
Malicious
File Type:
elf.32.be
Detections:
HEUR:Backdoor.Linux.Mirai.b
Status:
terminated
Behavior Graph:
%3 guuid=31282d70-2100-0000-115e-a21cbb0b0000 pid=3003 /usr/bin/sudo guuid=47ffb472-2100-0000-115e-a21cc10b0000 pid=3009 /tmp/sample.bin guuid=31282d70-2100-0000-115e-a21cbb0b0000 pid=3003->guuid=47ffb472-2100-0000-115e-a21cc10b0000 pid=3009 execve
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2026-02-17 13:54:46 UTC
File Type:
ELF32 Big (Exe)
AV detection:
21 of 36 (58.33%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:lzrd linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 3b8fabc3e2093ee2f50b5558ea732ba4bdd675cef2a92e9f4b697a44335c9547

(this sample)

  
Delivery method
Distributed via web download

Comments