MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 93232ba3b5f1f2e533c71cb99e19a73f540f8af7bcff4d4cab4dcc9535dca766. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 93232ba3b5f1f2e533c71cb99e19a73f540f8af7bcff4d4cab4dcc9535dca766
SHA3-384 hash: 838beac14c0a893bd1f0bc65ecf0a03215187136e9e1ab9a9d82ddfd6f1538ad30ccf5cd9a8f1f816397d6ba23216dc3
SHA1 hash: 54213abbb24ede5b48cea6cd63b8ab796b6d3f1a
MD5 hash: d390855d93511974b2ac1cf819494b63
humanhash: johnny-foxtrot-indigo-nebraska
File name:dlr.m68k
Download: download sample
Signature Mirai
File size:1'240 bytes
First seen:2026-02-01 07:29:34 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 24:30bdSAa8DzSWPpbP78Pwy74+CiCTihHcwD8ECAfGPiox9t0nVMNT1YV7V:4SApP3hb/mk2h8Y8DAfDbKNhYxV
TLSH T1FB211209F3496D4FEDA76478181B022730207A0EE8139523F3658E3F7D7B1D4121A1CE
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
67
Origin country :
DE DE
Vendor Threat Intelligence
Gathering data
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
masquerade
Result
Gathering data
Status:
terminated
Behavior Graph:
%3 guuid=f0c6e041-1a00-0000-9350-94e1570a0000 pid=2647 /usr/bin/sudo guuid=dac41444-1a00-0000-9350-94e1600a0000 pid=2656 /tmp/sample.bin guuid=f0c6e041-1a00-0000-9350-94e1570a0000 pid=2647->guuid=dac41444-1a00-0000-9350-94e1600a0000 pid=2656 execve
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1861125 Sample: dlr.m68k.elf Startdate: 01/02/2026 Architecture: LINUX Score: 48 14 169.254.169.254, 80 USDOSUS Reserved 2->14 16 162.213.35.24, 37114, 443 CANONICAL-ASGB United States 2->16 18 3 other IPs or domains 2->18 20 Multi AV Scanner detection for submitted file 2->20 6 python3.8 dpkg 2->6         started        8 dash rm 2->8         started        10 dash rm 2->10         started        12 dlr.m68k.elf 2->12         started        signatures3 process4
Threat name:
Linux.Worm.Mirai
Status:
Malicious
First seen:
2026-02-01 07:18:27 UTC
File Type:
ELF32 Big (Exe)
AV detection:
16 of 36 (44.44%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 93232ba3b5f1f2e533c71cb99e19a73f540f8af7bcff4d4cab4dcc9535dca766

(this sample)

  
Delivery method
Distributed via web download

Comments