MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200
SHA3-384 hash:	90468a45c9b08af6f1c507edf70400256518db234af547fe1580a7cc891dcc9a9180af535e3d8c56f55dc7e6a3ad5573
SHA1 hash:	c29f54caf86773898b4fc5083d5a5b9cdda43f7c
MD5 hash:	27e2bee202a97181087dc66565af4c50
humanhash:	item-ten-princess-winner
File name:	Josho.spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	60'144 bytes
First seen:	2025-11-28 19:48:13 UTC
Last seen:	2025-11-28 21:23:55 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:v67ehQcypdywmScHgKP/se/D7Ao8jKMk4eM:STZ3eLP/Z7FM
TLSH	T1FE431A227A362F1BC0D6E4F912F30725B1A57D6E1AA4C54ABC721E8FFF1169066036F4
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

85

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Mirai.632.18975.27452.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

gcc masquerade

Link:

https://www.filescan.io/uploads/6929fcba2cd29ea6300303d2/reports/c8eefc33-984c-4df7-9dd8-5f56bef1559a/overview

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ELF 32 BE

Detections:

HEUR:Backdoor.Linux.Mirai.b

Link:

https://opentip.kaspersky.com/51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/705248f2-76fc-415d-8017-ed2e45927d16

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/110115aa-26d6-4fcf-baee-670c18d838fb

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1822566

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-28 19:49:14 UTC

File Type:

ELF32 Big (Exe)

AV detection:

14 of 36 (38.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kgwyx7ctcs5r67xfbtsj4n6dymjdzecl6qifh4pf26xkd5p4yiaa._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:josho linux

Link:

https://tria.ge/reports/251128-yjq66awmew/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/9a9ef5c3-abf6-4a02-8705-a412154cb133

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/51ad8bfc5314bb1f7ee50ce49e37c3c3123c904bf41053f1e5d7aea1f5fcc200