MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 60f60e7a08e3242e515c985d19714edb0d2ef1796ddf6e26d35b109b04d304b1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 7

Intelligence 7 IOCs YARA 2 File information Comments

SHA256 hash:	60f60e7a08e3242e515c985d19714edb0d2ef1796ddf6e26d35b109b04d304b1
SHA3-384 hash:	a0930031556d06a998b0f070fa58f473b031c791b82f51a728cd7c222aef8526ab4b483d34a5303fe3805ff576f9618e
SHA1 hash:	a335a4e7710e71b6550e5026656303147cca353b
MD5 hash:	4f1d8f3ea13d28663bb1e4894e9963de
humanhash:	alaska-double-fruit-idaho
File name:	niggah.arm5
Download:	download sample
Signature	Mirai Create hunting rule
File size:	50'552 bytes
First seen:	2025-11-29 05:55:20 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:FwNAebA6wnFB+IV09iUsHPv4megdMxCCkGyGojmB0buB12oJwE8E0I:KNAEUzVPBvvVMxCPgYmO6BkC8E0
TLSH	T1DF330984BC91AA17CAC15677FB0E83C97B166398E2DD3303DD26AF61378B92B0D67501
telfhash	t15ce08661989428f835c0595e475866787551a16ea32214925af370158253ad2f01653d
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 6d55e1fc57013e7d42bc45cc316d71470c6fcc9495269239dd833580eba9b3e3

UPX unpacked

This file is the unpacked version of a file that has been packed with UPX. Below is furhter information about the parent (compressed) file.

File size (compressed) :	25'288 bytes
File size (de-compressed) :	50'552 bytes
Format:	linux/arm
Packed file:	6d55e1fc57013e7d42bc45cc316d71470c6fcc9495269239dd833580eba9b3e3

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Result

Verdict:

Malware

Maliciousness:

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

masquerade rust

Link:

https://www.filescan.io/uploads/692a8afeefb205635358d8a4/reports/4a59ba75-2a5f-4205-939e-aef0de61993b/overview

Result

Gathering data

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/b5270c7d-8ed1-4cac-acc7-9ce51db2ee8e

Gathering data

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1822735

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/60f60e7a08e3242e515c985d19714edb0d2ef1796ddf6e26d35b109b04d304b1

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/60f60e7a08e3242e515c985d19714edb0d2ef1796ddf6e26d35b109b04d304b1/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-11-29 05:56:14 UTC

File Type:

ELF32 Little (Exe)

AV detection:

15 of 36 (41.67%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=md3a46qi4msc4uk4tbors4ko3mgs54lznxpw4jwtlmijwbgtasyq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

n/a

Link:

https://tria.ge/reports/251129-gm4szsek8w/

Verdict:

Malicious

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/9f06bf6f-6490-434c-a2a5-bfa02643e875

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/60f60e7a08e3242e515c985d19714edb0d2ef1796ddf6e26d35b109b04d304b1

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.