MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739
SHA3-384 hash:	ccb93d45b8790d77774c923bff7761137ebee8c1ae9b85ef4a89f9bd43e0e2479d6164946b06e1b93444732211bd109d
SHA1 hash:	8772c9394d74213ea0510863a5b667eb81be93a9
MD5 hash:	6ce6172cc32c2721ead5397330eb63f4
humanhash:	bacon-carpet-indigo-maryland
File name:	87sbhas6as.mpsl
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	52'664 bytes
First seen:	2025-12-23 20:48:34 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:8uR8mMB/lkQ2w+ge0eMAe5ZPFt0ZI/qXiLohafr:8uR8//HpFFRAcZt+ZI/Mhor
TLSH	T15233C705BB654EF7DCABCC3746A8270024CC691E21FA7B76B534C91CF44B51B26E39A8
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai upx-dec

abuse_ch

UPX decompressed file, sourced from SHA256 c6e76ea7bd94127ac850f04a940417c33b48a85700674355886b40211fdc0ca4

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

79

Origin country :

NL

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30455.LC.BadVar.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-9858729-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9951087-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/694b004ce126b9ff438eef04/reports/155debc3-240a-48b3-bcc0-50c025b542a0/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.le

First seen:

2025-12-23T18:48:00Z UTC

Last seen:

2025-12-24T15:01:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/6976b04e-b686-403d-b80b-5ec3243f3fe3

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/000573db-10b5-4ba2-addb-13c2893e1fac

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1838439

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739/

ReversingLabs TitaniumCloud Linux.Trojan.Multiverze

Threat name:

Linux.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-23 20:49:18 UTC

File Type:

ELF32 Little (Exe)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ookox7ji2cu3baggrebbk5c72fh6cjhth3z6gm52wyiscdnke44q._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion

Link:

https://tria.ge/reports/251223-zl59jasnct/

Behaviour

Changes its process name

Writes file to system bin folder

Modifies Watchdog functionality

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9858729-0

YARA:

n/a

Link:

https://app.threat.zone/submission/ce770b17-2618-4450-85bd-c130687194de

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/7394ebfd28d0a9b080c6890215745fd14fe124f33ef3e333bab611210daa2739