MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33
SHA3-384 hash:	122ca0118b581633fe0006b9ef162b96a1b1e8d7abec40a6e1933beb03603542e5caa2bf1de76d4d3c3523c547a2dc61
SHA1 hash:	ca4f5f334fdbbaf35b2dad9303a97ebe0298b3a9
MD5 hash:	a626e8fe56cf5bda3895089dd5234ef2
humanhash:	lactose-berlin-high-louisiana
File name:	x86
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	214'540 bytes
First seen:	2026-11-11 11:11:04 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-sharedlib
ssdeep	6144:M52ZNZVLtqlEUv83qZk2hWaJ4nUxjEWOc2Mko:M0Zz9tqymZHPjEWOc8o
TLSH	T17A245B82E6C3D6F1F8A709B0002BA72F5B3499359424DB06EBD42E31EDB2606955F77C
telfhash	t15c61a641ce929cf8b7e64ec242f7893b59b6716deb9c1a601359a73b2d07d83441ec23
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

27

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV

Gathering data

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

base64 expand lolbin obfuscated rust

Link:

https://www.filescan.io/uploads/6af44d503612d320f8c04d8f/reports/8cc5b6de-b9e1-42f3-80f0-d45fc36d0926/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/f91d0210-a11c-4735-ac23-5c89acd075f7

Behavior Graph:

Download SVG

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/e978cd05-a7cb-4a21-9eab-a5daddda320f

Nucleon Malprob Malware

Score:

86%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33/

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ptgcho52v7ojlwogis5zzxxvinlowabnf7rypbucq7gukwbhxqzq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai antivm botnet discovery linux

Link:

https://tria.ge/reports/261111-ncvkwsgw5w/

Behaviour

Reads runtime system information

Checks CPU configuration

Reads system network configuration

Enumerates active TCP sockets

Unexpected DNS network traffic destination

Detects Mirai

Family: Mirai

VirusSign mirai

Malware Family:

mirai

Alert

Create hunting rule

Malicious:

True

Tags:

elf shared-library

Link:

https://intel.virussign.com/intelligence/file/7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/7ccc23bbbaafdc95d9c644bb9cdef54356eb002d2fe387868287cd455827bc33