MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c
SHA3-384 hash:	2e8f6fda951375f7a0e0f147e4f6226b7fa3f993933afc6760532cabfd9430a15847a6e9eddad8664c890fde372c2609
SHA1 hash:	8613d36ee405cbade5ad94c164cae35ebda48f9f
MD5 hash:	d5bc55a88e3192a836d44d8160cfa610
humanhash:	december-solar-eight-wisconsin
File name:	spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	72'740 bytes
First seen:	2025-11-01 10:30:46 UTC
Last seen:	2025-11-01 12:47:25 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:n7pjgMiNvIou4hfpJDd4zroklinrntF5VjotUt0tb:7mMiTfh6N0rt3ox
TLSH	T1AF633926BD360D17C4C5A87A21F34768F2F1538A26ECCA1E7C620E4EBF2465071976F9
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

125

Origin country :

DE

Vendor Threat Intelligence

FileScan.io

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-11-01T07:41:00Z UTC

Last seen:

2025-11-01T10:18:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/713e15a8-02cd-4781-a2ab-e97aa446741a

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/f40b64e7-db0e-4cc5-8553-0d2778486e1e

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj

Score:

68 / 100

Link:

https://www.joesandbox.com/analysis/1806258

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sends malformed DNS queries

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-01 10:19:20 UTC

File Type:

ELF32 Big (Exe)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hw7cd5q5n4iqovrvbcytb2ngnpbfobj3vu6777yuurfhp4ewl5ga._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai linux

Link:

https://tria.ge/reports/251101-mlck1atrez/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3dbe21f61d6f1107563508b130e9a66bc257053bad3dffff14a44a77f0965f4c