MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b
SHA3-384 hash:	7ffe9e0811da9a371ccdd89010b07a53480320dea65e73b6ee288670a12f1d398e6652a01c00a4d8428dfcf50edc96dc
SHA1 hash:	d5e3cb5d15c412492c90aa45b5005b493fa43004
MD5 hash:	a624bacc068e139525634f77638e9ca0
humanhash:	blue-wolfram-item-nebraska
File name:	spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	64'320 bytes
First seen:	2025-07-21 17:45:29 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:IDK6bb9lTEFq1X6JySbe7MkTbrv0kvnpdYm+A:mKQ27be7MkTc0DN
TLSH	T11E534A217A792E17C4E4A07E25B38324B6E5678E32B8C65D7C723F4EFF1066064171B6
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

18

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135939-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7136025-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9964459-0

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/687e7cce19132d984884373a/reports/595c7ae6-f715-473a-935c-ec04e30335cf/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/90ba613d-41e4-48cd-b180-a9682742cb47

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/562104e9-8818-4fa0-8cd0-6d5dc8f53a49

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1741489

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b/

Neiki HEUR:Backdoor.Linux.Mirai

Verdict:

Malicious

Threat:

HEUR:Backdoor.Linux.Mirai

Link:

https://tip.neiki.dev/file/b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-21 17:45:42 UTC

File Type:

ELF32 Big (Exe)

AV detection:

20 of 36 (55.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wgl5mqexpyhu4kdto76k63t7s7fjwj2eqpie6rvhrmy5rjlhxmvq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:kurc linux

Link:

https://tria.ge/reports/250721-wb4q6sxxax/

Threat.Zone Malicious

Malware Family:

n/a

Verdict:

Malicious

Tags:

Unix.Dropper.Mirai-7135870-0

YARA:

n/a

Link:

https://app.threat.zone/submission/c3492fe6-3d3f-4214-81ac-55e7482dca84

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b197d640977e0f4e287377fcaf6e7f97ca9b274483d04f46a78b31d8a567bb2b