MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 8

Intelligence 8 IOCs YARA 2 File information Comments

SHA256 hash:	62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06
SHA3-384 hash:	9af41902061232a9418cb0c69b968f7e6b71e084cae3274a13f4f3ae3159ad400cde2a9760cd5a664e48040621e36ba6
SHA1 hash:	9d15080e54957cb8622b30120dffdd7e0cfb3d3e
MD5 hash:	1b9a8cb7ac821b37ff54b20b323c5ed9
humanhash:	tango-missouri-harry-failed
File name:	wife.ppc440
Download:	download sample
Signature	Mirai Create hunting rule
File size:	198'332 bytes
First seen:	2026-06-10 01:54:36 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	6144:tP+jSzu411twxoHtzVMTpQJOC8edI4vDN6E:BPu4fUS1DNr
TLSH	T17F146C02F70D4263D6535EF4497A0777932989D309F6E40E690A7B0A1633DBEA7C7B84
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 a32c732268dba58d78652994fb0b208d8214c0e20632a1a586ad7331830ef27a

UPX unpacked

This file is the unpacked version of a file that has been packed with UPX. Below is furhter information about the parent (compressed) file.

File size (compressed) :	66'884 bytes
File size (de-compressed) :	198'332 bytes
Format:	linux/ppc32
Packed file:	a32c732268dba58d78652994fb0b208d8214c0e20632a1a586ad7331830ef27a

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Result

Verdict:

Malware

Maliciousness:

Behaviour

DNS request

Changes access rights for a file

Creating a file

Deletes a file

Connection attempt

Sends data to a server

Runs as daemon

Receives data from a server

Deletes a system binary file

Substitutes an application name

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

bash gcc lolbin

Link:

https://www.filescan.io/uploads/6a28c416bf16337e43bf125c/reports/3214aaac-8dc0-4ced-82db-e03ed8e0bef4/overview

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2026-06-09T23:27:00Z UTC

Last seen:

2026-06-11T22:21:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/4a4cb7a4-addb-4fb6-82fc-525743502b39

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/612f20d6-250f-495f-b4be-8b5983f84d8a

Score:

99%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06

Detection:

mirai

Link:

https://mwdb.cert.pl/sample/62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06/

Threat name:

Linux.Trojan.Generic

Status:

Suspicious

First seen:

2026-06-10 01:55:42 UTC

File Type:

ELF32 Big (SO)

AV detection:

11 of 24 (45.83%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mlrn2v6svvb676exy7lwvqr3mir7uz5rxrshx5trfppocdaefida._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/260610-ccenwsct21/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/62e2dd57d2ad43eff897c7d76ac23b6223fa67b1bc647bf6712bdee10c042a06

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.