MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4ac6c13989dd2dc317d886a1a34282eedc4fd014724163997c607bb3a6d6e0b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 4ac6c13989dd2dc317d886a1a34282eedc4fd014724163997c607bb3a6d6e0b6
SHA3-384 hash: 65a57987f65b9b77b67d3aa327aa3019f3681b3cdf63cd92e1a1d2cce03fd9547430430fbf90f98dafed1e41c8eb260e
SHA1 hash: 5d10e37c0adb7204610e06b605c83f96b5571035
MD5 hash: 5e1513feadad74391279c7398dfb7fce
humanhash: solar-ink-north-west
File name:angelamips
Download: download sample
Signature Mirai
File size:64'688 bytes
First seen:2026-02-01 19:23:23 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:wAEHZTQG1PdhZ9fmgLr5u72Lqk9lVjxiEmqME:wAEs72LqKlxihRE
TLSH T1C253D49E2F328FEEF36E83344B735E71C265239A26E0D744D26DE5051E2024E581FB68
telfhash t1a4016d1c493823f0e7c61d9dabedff39e45181df0a216f338c50e89aab519459d00d2c
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
67
Origin country :
DE DE
Vendor Threat Intelligence
Gathering data
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Gathering data
Status:
terminated
Behavior Graph:
%3 guuid=e3931df1-1c00-0000-95e7-ee71450a0000 pid=2629 /usr/bin/sudo guuid=e9c318f3-1c00-0000-95e7-ee714b0a0000 pid=2635 /tmp/sample.bin guuid=e3931df1-1c00-0000-95e7-ee71450a0000 pid=2629->guuid=e9c318f3-1c00-0000-95e7-ee714b0a0000 pid=2635 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
56 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2026-02-01 19:24:57 UTC
File Type:
ELF32 Big (Exe)
AV detection:
13 of 36 (36.11%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 4ac6c13989dd2dc317d886a1a34282eedc4fd014724163997c607bb3a6d6e0b6

(this sample)

  
Delivery method
Distributed via web download

Comments