MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 5

Intelligence 5 IOCs YARA 1 File information Comments

SHA256 hash:	8f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841
SHA3-384 hash:	0ebdd70e61e69d852a3ce2fb0ce78b5e110abff3736b03f82bf2e26eb74b4d3f6aa3265c618f27c77f1e85c3749a2a48
SHA1 hash:	c21afd45b5a7614188714f69b70b2f716261b913
MD5 hash:	2ea77cad62e805d4cbc7f103b5c3fb49
humanhash:	eleven-tennessee-maryland-beryllium
File name:	morte.spc
Download:	download sample
Signature	Mirai Create hunting rule
File size:	94'944 bytes
First seen:	2025-08-02 12:14:47 UTC
Last seen:	2025-08-10 14:16:51 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:iqKCLw6IMIXR3OCiIp86P1h2QDtoiJq50zAZwralt39hBw:kLrOYRGiJ60sFW
TLSH	T169936C22FA79193BC8C4A97662F30722F1F7438724A89A1F7C710D8DAF6465022677F4
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/688e016edc44c87d077aaa15/reports/82614ed1-83af-4c51-b496-a639af22f3f8/overview

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/70c4cba9-6532-4aea-9aab-ee1c9c37f6fd

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/34805958-a3cc-49cb-9afe-8c07b9fdf173

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1749046

Signature

Deletes system log files

Manipulation of devices in /dev

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/8f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-08-02 12:15:38 UTC

File Type:

ELF32 Big (Exe)

AV detection:

22 of 38 (57.89%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=r56bmivydxs3uokbivkswm5vd2dkacjzf54iiqelubih5ikixbaq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/250802-pe7hxaskz3/

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/d2f6b949-c723-4a73-b0c4-0d8c94e5f843

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8f7c1622b81de5ba394145552b33b51e86a009392f7884408ba0507ea148b841

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.