MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 718162da8a62c081ee849ce425e0566a416a5560b4c20efb5501c9a14565d42e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 8

Intelligence 8 IOCs YARA 1 File information Comments

SHA256 hash:	718162da8a62c081ee849ce425e0566a416a5560b4c20efb5501c9a14565d42e
SHA3-384 hash:	3fbbd252c54b545c9005a7d6b8d2f5217a772b3527b75291da56405c1c115e76262fd70449136f3553e679955a6c1385
SHA1 hash:	863375c217d39cbd5fef1cb734260ee04f32a9ae
MD5 hash:	0b342a369426bda1da4f62e971dba9c3
humanhash:	triple-venus-nitrogen-undress
File name:	parm5
Download:	download sample
Signature	Mirai Create hunting rule
File size:	19'652 bytes
First seen:	2025-11-28 19:20:18 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:KA2prMH7uVUIvBk2pjBM4HzuS4LLY0qBHAb1dXCTv6V0idzhymdGUop5hWZ:KAKrMH7uWI+2ZGmzuDdqJKdSTvEzs3UV
TLSH	T1A792D070681A7675FEB00DF98F2F0442136BDFF9C9BB313D21386218945100B457D8AE
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai UPX

UPX packed

This file is packed with UPX. We have therefore unpacked the file. Below is furhter information about the unpacked (de-compressed) file.

File size (compressed) :	19'652 bytes
File size (de-compressed) :	42'504 bytes
Format:	linux/arm
Unpacked file:	89912e2fe24959c48c45131a3260aa6b8dd123a7ae820a9c82b418b37dbdf8a3

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Detection(s):

SecuriteInfo.com.Linux.Mirai-18.UNOFFICIAL

Unix.Trojan.Mirai-8274771-0

Result

Verdict:

Malware

Maliciousness:

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

packed upx

Link:

https://www.filescan.io/uploads/6929f630efb205635358a590/reports/921c1450-9f79-4cd0-9fae-7809b91177da/overview

Result

Gathering data

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/e1502fc5-fe6e-4abe-bf6a-05803b6acb85

Malware family:

Mirai

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/c11151cd-bb45-406a-b506-f3b6415fe434

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1822422

Signature

Multi AV Scanner detection for submitted file

Sample is packed with UPX

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/718162da8a62c081ee849ce425e0566a416a5560b4c20efb5501c9a14565d42e

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/718162da8a62c081ee849ce425e0566a416a5560b4c20efb5501c9a14565d42e/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-11-28 19:21:21 UTC

File Type:

ELF32 Little (Exe)

AV detection:

13 of 36 (36.11%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ogawfwukmlaid3uettsclycwnjawuvlawtba562vahe2crlf2qxa._file

Result

Malware family:

n/a

Score:

5/10

Tags:

upx

Link:

https://tria.ge/reports/251128-x2bnrawlbv/

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-8274771-0

YARA:

n/a

Link:

https://app.threat.zone/submission/9172875b-278b-4ded-bfda-0813c2f944d4

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/718162da8a62c081ee849ce425e0566a416a5560b4c20efb5501c9a14565d42e

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.