MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6b5d2ee2c0bb8af1ec9ee6df0a3706f8319034025e91d3e062fe378547179546. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 11


Intelligence 11 IOCs YARA File information Comments

SHA256 hash: 6b5d2ee2c0bb8af1ec9ee6df0a3706f8319034025e91d3e062fe378547179546
SHA3-384 hash: 0995f2e828fbf9bcff6109558a940e020bc999412435cec565d9f7c152258f9168834d369b2211972c8027f875670eb6
SHA1 hash: 43b6ff8e81064c2f8ca89edfeb54eab9831c8ccf
MD5 hash: 8179516c97925e56ae520d5edd103340
humanhash: wyoming-mexico-johnny-pasta
File name:spc
Download: download sample
Signature Mirai
File size:72'660 bytes
First seen:2025-03-14 14:31:21 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:IcowEe26GLAhfg+MhN2K1sv11FN1nD3Id1pvpnh3Ei3YaJbyqCDSgPoGO+75ZLo0:IcIMlhfgNhNvRpnjVypX75mUotQ/
TLSH T1C9636B21B8391E27C0E4957A22F7872AB2F9534E24E4862E3E750F8EFF5558076472F1
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
90
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
lolbin remote
Result
Verdict:
MALICIOUS
Result
Threat name:
Detection:
malicious
Classification:
troj
Score:
64 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1638625 Sample: spc.elf Startdate: 14/03/2025 Architecture: LINUX Score: 64 20 13.11.146.186 XEROX-WVUS United States 2->20 22 13.20.238.163 XEROX-ELLUS United States 2->22 24 98 other IPs or domains 2->24 26 Antivirus / Scanner detection for submitted sample 2->26 28 Multi AV Scanner detection for submitted file 2->28 30 Yara detected Mirai 2->30 8 dash rm spc.elf 2->8         started        10 dash rm 2->10         started        signatures3 process4 process5 12 spc.elf 8->12         started        process6 14 spc.elf 12->14         started        16 spc.elf 12->16         started        18 spc.elf 12->18         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-03-14 14:32:13 UTC
File Type:
ELF32 Big (Exe)
AV detection:
18 of 24 (75.00%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:wicked linux
Verdict:
Malicious
Tags:
Unix.Dropper.Mirai-7136015-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 6b5d2ee2c0bb8af1ec9ee6df0a3706f8319034025e91d3e062fe378547179546

(this sample)

  
Delivery method
Distributed via web download

Comments