MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b
SHA3-384 hash:	649c78277834110c0b77b987cfa3416831430b0cfab9efb4df9845aa5601aeb0cb4fc17e005ff70de819fb341f16982d
SHA1 hash:	f2d6b69a377f61da556f7013d820f5a2fa15979f
MD5 hash:	a6ab8da2177c17782c46fe14b4f9cc51
humanhash:	twelve-enemy-paris-leopard
File name:	rev.arm7
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	35'400 bytes
First seen:	2025-05-22 14:41:37 UTC
Last seen:	2025-05-22 20:30:13 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	768:sRnC2d3qowhaqleCiIf5bFHmKit0C5Y6xe3IjsA:sRnNSaqlRi4bhcY6xcOsA
TLSH	T1AEF2296AF9406F11E9C110BEFF5F124933534B6CE3EA72029A249B2473C7E6A0F7A515
telfhash	t1bba0020541304c6454e01602943d73014834d1cda045ecfc52bbcd881813c90901276c
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

84

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.Linux.Mirai.13893.7533.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

N/A%

Link:

https://cyber-fortress.com/docs/result/index.php?id=682f394f2f280a98fb433ea0linux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

lolbin masquerade remote

Link:

https://www.filescan.io/uploads/682f37d8171e01f9592a8480/reports/cd387c8a-e4d5-4c51-b1d8-4a5733aed761/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

arm

Packer:

not packed

Botnet:

unknown

Number of open files:

0

Number of processes launched:

0

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

Intezer Mirai

Malware family:

Mirai

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/55283ac6-7983-4545-a58d-2e5f7583409c

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1696953

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-05-22 14:30:10 UTC

File Type:

ELF32 Little (Exe)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=qikgjg565hiayxrn3hdyzdm7zri2fo7kx6bmd4uo6hxil6eql5nq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/250522-r27hjahm81/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8214649bbee9d00c5e2dd9c78c8d9fcc51a2bbeabf82c1f28ef1ee85f8905f5b