MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b2e20a0872c5655d8cfdaf04af712dff9b9ce73c26caad5c039280fc738cfd33. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 12


Intelligence 12 IOCs YARA File information Comments

SHA256 hash: b2e20a0872c5655d8cfdaf04af712dff9b9ce73c26caad5c039280fc738cfd33
SHA3-384 hash: e0eb6e66b2c456761b08de781de084fff3dfe7b1941e41f5162d5576e47a0aaa60a9b06e30a4b7f28069b31fd995dda4
SHA1 hash: 547357ac95900b7cc5b58f542c5b2c394d781e11
MD5 hash: 44be1b5c620f650463152013a174350c
humanhash: texas-summer-september-tennis
File name:spc
Download: download sample
Signature Mirai
File size:72'660 bytes
First seen:2025-01-09 11:46:51 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:IcowEe26GLAhfg+MhN2K1sv11FN1nD3Id1pvBnh3Ei3kaJbyqCDSgPoGO+75ZLo0:IcIMlhfgNhNvRBn3VypX75mUotQ/
TLSH T1B4636B21B8391E27C0E4957A22F7872AB2F9534E24E4862E3E750F8EFF5558076472F1
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
127
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug lolbin remote
Result
Verdict:
MALICIOUS
Result
Threat name:
Detection:
malicious
Classification:
troj
Score:
64 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1586638 Sample: spc.elf Startdate: 09/01/2025 Architecture: LINUX Score: 64 18 5.94.208.42 VODAFONE-IT-ASNIT Italy 2->18 20 14.165.161.27 VNPT-AS-VNVNPTCorpVN Viet Nam 2->20 22 98 other IPs or domains 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 28 Yara detected Mirai 2->28 8 spc.elf 2->8         started        signatures3 process4 process5 10 spc.elf 8->10         started        process6 12 spc.elf 10->12         started        14 spc.elf 10->14         started        16 spc.elf 10->16         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-01-09 12:06:55 UTC
AV detection:
17 of 24 (70.83%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:wicked linux
Verdict:
Malicious
Tags:
Unix.Dropper.Mirai-7136015-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf b2e20a0872c5655d8cfdaf04af712dff9b9ce73c26caad5c039280fc738cfd33

(this sample)

  
Delivery method
Distributed via web download

Comments