MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e
SHA3-384 hash:	bef8cc01e47d275febc463a042e0c61b709d335ed5beb5bb015fc5699fb7a1f0ff3cc9d1f8323aeccdda6eb95d08f3e8
SHA1 hash:	76000f0ae5d17344a9c05ceb3618635939966cef
MD5 hash:	eff853814ea9d2009447c42c38ccd451
humanhash:	victor-salami-moon-oscar
File name:	rondo.powerpc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	122'244 bytes
First seen:	2025-12-23 09:24:44 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:1E1iNdXR6yrSrSghhE7hM70uRPzilaOeqwgsNiC7lLe9ijj3Djx6Z0dM:6UNb6HSyi9MgC2l5kwC9e6RvM
TLSH	T1D5C35D47B70C0A57E2A619F06B3B37D783E9D5D131E0A6882A0DBB8852B1D771189FCD
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

87

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/694a5ffe3f8fdbf8e94fc75a/reports/0610799f-3ff8-4ab7-856b-630ae77d391a/overview

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2025-12-23T07:53:00Z UTC

Last seen:

2025-12-23T08:14:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/839b48c5-e051-454c-afcc-9c84a49f426b

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/365d2b9e-8e4c-44ec-9270-95060f831513

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1838137

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-23 09:25:15 UTC

File Type:

ELF32 Big (Exe)

AV detection:

4 of 36 (11.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wpboikfpjdqvm33f7dgwowlf3okktbf2esvv4qkw4t6vbn6gjcha._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/251223-nkcp2svphw/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/091c3a04-732b-4364-89c8-704c785407a6

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b3c2e428af48e1566f65f8cd675965db94a984ba24ab5e4156e4fd50b7c6488e