MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525
SHA3-384 hash:	0a8f71547c9c954297f7168f4f5f82665315675598d8217558ed1d10a79491b33d7783c4d73c1ada64a41ddeea4599a0
SHA1 hash:	346348855de581bde6291e956494de7a9c41036c
MD5 hash:	3e8ab466b7c59853f9f8ba7353896a91
humanhash:	delta-montana-arizona-equal
File name:	dlr.mips
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'000 bytes
First seen:	2026-02-01 07:29:32 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	48:Oji5E4GYg2H7p1eHju/9LuEpExn3gfBeBl:956WH1nMEpEV3Iwl
TLSH	T17341FE8A1F725EF9F05AE93847370B3927AA524843D14289E1ACDA002EC130D89DEBD9
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

65

Origin country :

DE

Vendor Threat Intelligence

ACCE

Gathering data

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Mirai-1.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.30479.LC.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/697f0126930564ff3c81822f/reports/f6255a12-8ffe-401c-92fc-d34875e5d0c9/overview

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

mips

Packer:

not packed

Botnet:

unknown

Number of open files:

0

Number of processes launched:

1

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/46be9413-e8e0-4a6d-b9e2-8c6ce51c935f

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/6e49c8f8-1acd-41de-b41d-54844b0a4eaa

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj

Score:

72 / 100

Link:

https://www.joesandbox.com/analysis/1861129

Signature

Antivirus detection for dropped file

Connects to many ports of the same IP (likely port scanning)

Multi AV Scanner detection for submitted file

Uses known network protocols on non-standard ports

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-01 07:19:00 UTC

File Type:

ELF32 Big (Exe)

AV detection:

15 of 36 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wntel7wepjb2drrjus76ozbhyjqgwrfgwd3lefmyfpgxicpdqusq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/260201-jb58sadv3h/

Behaviour

System Network Configuration Discovery

Writes file to tmp directory

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b36645fec47a43a1c629a4bfe76427c2606b44a6b0f6b215982bcd7409e38525