MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 7

Intelligence 7 IOCs YARA 3 File information Comments

SHA256 hash:	5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b
SHA3-384 hash:	268c7e5287d948c59b138bc6325c47e8f50737a8a5040ca2a454550651e79a31082b9cbe4f96f8350ce24b4f45a3f968
SHA1 hash:	b79bb2ba1e6afc45da71d1c5337efa2fbba4326c
MD5 hash:	3e5972d9589f0d5069fa6d3d23ba899a
humanhash:	oxygen-coffee-social-alanine
File name:	5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b
Download:	download sample
Signature	Mirai Create hunting rule
File size:	150'656 bytes
First seen:	2026-09-23 13:17:12 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	3072:T2s/ITo7WCkybotgsJ913DhrbW4UYSx7QpUiB5IQggEuaJhnR1rmaab9:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRQ
TLSH	T1D6E3199EFD819E6546C127BBFE2E418E331327B4D2EB71029D141F2876CA94F0E3A552
Magika	elf
Reporter	GAYINT_DOT_ORG
Tags:	arm cowrie elf honeypot mirai

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Detection(s):

SecuriteInfo.com.Linux.Mirai.4873.27143.21742.UNOFFICIAL

Result

Verdict:

Malware

Maliciousness:

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

mirai rust

Link:

https://www.filescan.io/uploads/6ab3d1958266562bd32d8314/reports/0a8a4663-0781-4a35-9ba7-a05383b8d3ca/overview

Verdict:

Malicious

File Type:

elf.32.le

First seen:

2020-11-12T14:50:00Z UTC

Last seen:

2026-09-23T13:41:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/d3333b82-83ac-4fe6-a64d-68417729b809

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/f5780252-6ce2-4911-818f-9c159bdb2d9c

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b/

Threat name:

Linux.Backdoor.Mirai

Status:

Malicious

First seen:

2020-11-12 18:05:31 UTC

File Type:

ELF32 Little (Exe)

AV detection:

25 of 36 (69.44%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l555oalq4lushsqvqpknnsrotvgzapt6vb2clkgq4i4n7xjpnzfq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

n/a

Link:

https://tria.ge/reports/260923-qjzvastw8q/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5f7bd70170e2e923ca1583d4d6ca2e9d4d903e7ea87425a8d0e238dfdd2f6e4b

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	Linux_Generic_Threat_c19ca8e5 Create hunting rule
Author:	Elastic Security

Rule name:	Mal_LNX_Mozi_Botnet_ELF Create hunting rule
Author:	Phatcharadol Thangplub
Description:	Use to detect Mozi botnet.

Rule name:	TH_Generic_MassHunt_Linux_Malware_2026_CYFARE Create hunting rule
Author:	CYFARE
Description:	Generic Linux malware mass-hunt rule - 2026
Reference:	https://cyfare.net/