MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6335958f87009f0c085150fbfc91707439a9e127d561afc44c8c5a69a76077e8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6335958f87009f0c085150fbfc91707439a9e127d561afc44c8c5a69a76077e8
SHA3-384 hash:	9241a5c579315ff56d294a29392467324b8940884a5374f05ac37de6c5ec79d80b28d913d83e0ea5be99bfa255f98692
SHA1 hash:	50ae7bb4ee33d390b809cba6566dc2dbbcf030fc
MD5 hash:	000e97ad2f9895f3b505ea4e5b8c3cd7
humanhash:	hamper-nine-michigan-papa
File name:	Owari.mips
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	68'804 bytes
First seen:	2026-02-07 14:27:59 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:2VVUIa+SzL6P1rNVHV0vaEfKOYFRhOJmuE79ywo8eFpV:2VqIfVBNf0STDhO5PPHrV
TLSH	T1C163971A3E219FBDFBAC863887B78E20965833D616F1C584D15CED015E7038E645FB98
telfhash	t1a7016268453802f0d3804ecd7bddef3ae49140df99222e378e40eaa7aa257455c01c2c
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

29

Origin country :

DE

Vendor Threat Intelligence

ACCE Mirai_Botnet_XOR_Lookup

Malware configuration found for:

Mirai

Details

Mirai

an XOR decryption key and at least a c2 socket address

Link:

https://research.acce.ciphertechsolutions.com/results/9d0a0d02-b74e-4898-972c-ee9b01a3229d/

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135890-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135939-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7136025-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/69874c0b2ffccda0976a24b2/reports/30696491-c193-4686-8d5e-d0fe01e0f9c6/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/d96e690e-4c7d-4507-964f-d4b073fa4ccc

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/88f1bcdc-4c7c-4604-ba40-4059f272d2c8

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

spre

Score:

60 / 100

Link:

https://www.joesandbox.com/analysis/1865271

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample tries to kill multiple processes (SIGKILL)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/6335958f87009f0c085150fbfc91707439a9e127d561afc44c8c5a69a76077e8

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/6335958f87009f0c085150fbfc91707439a9e127d561afc44c8c5a69a76077e8/

Neiki Family.MIRAI

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/6335958f87009f0c085150fbfc91707439a9e127d561afc44c8c5a69a76077e8

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mm2zld4hacpqyccrkd57zelqoq42tyjh2vq27rcmrrngtj3ao7ua._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:owari defense_evasion discovery

Link:

https://tria.ge/reports/260207-rs5btabt4b/

Behaviour

Reads runtime system information

System Network Configuration Discovery

Changes its process name

Reads system network configuration

Enumerates active TCP sockets

Modifies Watchdog functionality

Contacts a large (88938) amount of remote hosts

Creates a large amount of network flows

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.