MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996
SHA3-384 hash: d4d1a1fa3b04ff6e24501a5aaf99b3428739b27d7dc50ab2b9b7aa2aeb7e99289a449f9103985ee165f3d694c1b75552
SHA1 hash: 52f04602c9d36f5668a2fa5a4c9b9573d351abae
MD5 hash: 7d877a2840dd198e8c48e294e569f9a0
humanhash: october-carolina-sodium-bakerloo
File name:xnxnxnxnxnxnxnxnriscv32xnxn
Download: download sample
Signature Mirai
Create hunting rule
File size:123'768 bytes
First seen:2025-12-07 16:30:58 UTC
Last seen:2025-12-07 23:17:07 UTC
File type: elf
MIME type:application/x-executable
ssdeep 3072:v5r4Pq6l/1dneme81N1v+4uDSXt2Jus8ArS1bMMTnl:54y6dea1FuDGt2jSdxTnl
TLSH T1A9C3E098FA279882D1A302FDA8D116C293912D66CF52434813ADF6783D7D8F71F98ED1
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
78
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6935abd3d12d1c79d42a4e4f/reports/07134692-655e-471b-8476-0b28e809bfa6/overview
Result
Gathering data
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/522d7dca-3f2a-462f-9b5a-db826838daa7
Result
Threat name:
n/a
Detection:
malicious
Classification:
spre.evad
Score:
60 / 100
Link:
https://www.joesandbox.com/analysis/1828466
Signature
Deletes system log files
Manipulation of devices in /dev
Sample tries to kill a massive number of system processes
Sample tries to kill multiple processes (SIGKILL)
Behaviour
Behavior Graph:
Download SVG
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996/
Threat name:
Linux.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2025-12-07 16:31:15 UTC
File Type:
ELF32 Little (Exe)
AV detection:
3 of 36 (8.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=slpbkp72uymyfis5evdtlkdoj5bnsz2achp2ig5dhzcdnfje3gla._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/251207-t1gltsdm7t/
Verdict:
Unknown
Tags:
n/a
YARA:
n/a
Link:
https://app.threat.zone/submission/283ad571-48aa-491e-94e0-a6b8e2e7f55c
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:enterpriseapps2
Create hunting rule
Author:Tim Brown @timb_machine
Description:Enterprise apps
Rule name:unixredflags3
Create hunting rule
Author:Tim Brown @timb_machine
Description:Hunts for UNIX red flags

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 92de153ffaa61982a25d254735a86e4f42d9674011dfa41ba33e44369524d996

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3713413/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/3713402/

Comments