MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 5

Intelligence 5 IOCs YARA 1 File information Comments

SHA256 hash:	af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4
SHA3-384 hash:	557ebaceffdaab4fd53c8f650fe3a2f72fd93d5e57cf6c3969bbfb1d9f2c9e743849e9e2c0c712a4f74dbaedc52aefd7
SHA1 hash:	70fa6d461c2f078ca31921b69f26d721d0c4d6e1
MD5 hash:	36eb35df01314aa12d6684d559c5321d
humanhash:	bravo-cat-pluto-diet
File name:	mips
Download:	download sample
Signature	Mirai Create hunting rule
File size:	143'852 bytes
First seen:	2025-12-22 08:16:01 UTC
Last seen:	2025-12-22 18:20:55 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	3072:I5KeImSFmcLbaqWZ2RmKdkAf383PqCVS+hVFyDv:UKeImSRnaqW2bMPqg8Dv
TLSH	T177E3530EAD219F3FF22CC33647F7C664A36527D723E3E24AD25CD5241E5838A581AB64
telfhash	t1b9219a1c4a7863f497744c9d1adeff76e58030df5b266d378e01e4acaaad9425d00c1c
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

No detections

Detection(s):

SecuriteInfo.com.ELF.Mirai-BYP.65852915.UNOFFICIAL

Result

Verdict:

Clean

Maliciousness:

Verdict:

Likely Malicious

Threat level:

7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/6948fe5584afa5547b5bd9fa/reports/9eb82ab8-b76d-41d4-8c79-e7cf5df268a6/overview

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2025-12-22T07:32:00Z UTC

Last seen:

2025-12-22T13:40:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/dd5d00b1-5fbc-4f84-bd8c-c3981771195c

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/40e53ba1-ca03-42b1-b898-389ab9508b68

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1837526

Behaviour

Behavior Graph:

n/a

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-12-22 08:16:23 UTC

File Type:

ELF32 Big (Exe)

AV detection:

7 of 23 (30.43%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=v56xz5zcgt62qp7pga2n7sbdynomaoukfuqpgy7kjbqmttq2bdsa._file

Result

Malware family:

n/a

Score:

3/10

Tags:

discovery

Link:

https://tria.ge/reports/251222-j6epbagr5v/

Behaviour

System Network Configuration Discovery

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/b92c83de-b745-4212-8884-3d23c73dd68d

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/af7d7cf72234fda83fef3034dfc823c35cc03a8a2d20f363ea4860c9ce1a08e4

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.