MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534
SHA3-384 hash:	7dcd7ddf6d9eed0dd47ef7b3b3b8e4d77534e576b4538a1da4e3ddf4f84c1f82b0748dc00cf3363dd8a6f45573b39312
SHA1 hash:	ad52d17168171ab1982e07aa903c21c0feca3170
MD5 hash:	89638aeeb8de332eb6991942a6b34dd5
humanhash:	uranus-rugby-glucose-mirror
File name:	87sbhas6as.m68k
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	39'040 bytes
First seen:	2025-12-23 20:47:54 UTC
Last seen:	2025-12-23 21:05:44 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	768:vIQJ3fiZ0t+FqD806l8lGAq2GfxTW3AGDQY:gMfiuIqw5l8saGfxTOA8
TLSH	T1D2032A8AB4029E3CF94FF77F54124918F5617356D1D30B2A53A7FE53A8332682E52E82
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

95

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30455.LC.BadVar.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-6981989-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9858729-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9940650-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9951087-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10018298-0

Alert

Create hunting rule

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-12-23T18:04:00Z UTC

Last seen:

2025-12-24T12:48:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/e9776112-22b5-425b-8ded-481bcdde5d34

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/d9dc391c-0e58-46c4-a3a4-21c9ae2477f4

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1838443

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-23 20:48:35 UTC

File Type:

ELF32 Big (Exe)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kse5t35w75daza26z7346dqnssh6qunw6n54tfl6fnszxzktuu2a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/251223-zlndqasna1/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-6981989-0

YARA:

n/a

Link:

https://app.threat.zone/submission/2f021997-c9d5-4b1e-8d3a-c4b041a99116

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5489d9efb6ff460c835ecff7cf0e0d948fe851b6f37bc9957e2b659be553a534