MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d7124ac2d8513c36d922be593cbfadf972b6f9994a8845da79dcf19be107ba6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 6d7124ac2d8513c36d922be593cbfadf972b6f9994a8845da79dcf19be107ba6
SHA3-384 hash: 1091c2ebfb4072884cfeaa102282a291090709f7871db86f53616b8cd86eaa03618a7ea2bb42421fe9d489cebd556831
SHA1 hash: dfa20a6df4295c1030b6a50f10c03ca60df420ae
MD5 hash: ad68da651c9ab805a906956a0857edb9
humanhash: vermont-four-pip-november
File name:angelappc
Download: download sample
Signature Mirai
File size:46'664 bytes
First seen:2026-02-01 19:23:13 UTC
Last seen:2026-02-02 06:06:45 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:HRNUl3lU2D3gDyiWclmCxv35DMRFcBov1C9ypVqrQuSehInOr2f:xNUl3lU2D3gDyiWclmYkQotC9ynqrQAq
TLSH T1B2235D80775C4EA3C1733E746A7F1FC1C349EA512169DA48260E6A0BC0F6DB29646EFD
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
2
# of downloads :
74
Origin country :
DE DE
Vendor Threat Intelligence
Gathering data
Verdict:
Unknown
File Type:
elf.32.be
First seen:
2026-01-31T23:21:00Z UTC
Last seen:
2026-01-31T23:33:00Z UTC
Hits:
~10
Status:
terminated
Behavior Graph:
%3 guuid=52e7cc9e-1800-0000-079a-d394390a0000 pid=2617 /usr/bin/sudo guuid=25f19ea0-1800-0000-079a-d394400a0000 pid=2624 /tmp/sample.bin guuid=52e7cc9e-1800-0000-079a-d394390a0000 pid=2617->guuid=25f19ea0-1800-0000-079a-d394400a0000 pid=2624 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1861267 Sample: angelappc.elf Startdate: 01/02/2026 Architecture: LINUX Score: 48 12 109.202.202.202, 80 INIT7CH Switzerland 2->12 14 91.189.91.42, 443 CANONICAL-ASGB United Kingdom 2->14 16 2 other IPs or domains 2->16 18 Multi AV Scanner detection for submitted file 2->18 6 dash rm 2->6         started        8 dash rm 2->8         started        10 angelappc.elf 2->10         started        signatures3 process4
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2026-02-01 13:33:54 UTC
File Type:
ELF32 Big (Exe)
AV detection:
8 of 36 (22.22%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 6d7124ac2d8513c36d922be593cbfadf972b6f9994a8845da79dcf19be107ba6

(this sample)

  
Delivery method
Distributed via web download

Comments