MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 5

Intelligence 5 IOCs YARA 1 File information Comments

SHA256 hash:	b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47
SHA3-384 hash:	687417d36ed923c0e91612cb74526b2505da89d3a0c136d4f1867f95e4a7bb7ccf550fcf113febc58756598366ff31ca
SHA1 hash:	9f73d17ecc191bf7f1f8f9f86e38e8ecd159780d
MD5 hash:	f9a98767119e64bc850e2710390fe8d7
humanhash:	may-lake-november-ohio
File name:	sparc
Download:	download sample
Signature	Mirai Create hunting rule
File size:	132'564 bytes
First seen:	2025-12-23 00:33:03 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:v0mFE+J7+BUJ2F2FZlC1yXRANbhiyakCX3ztYTAqzWkDZptWToP75r0buuWKUIVG:/XqB9F26NbBbCnztyDWi3t8juu+IVhbE
TLSH	T109D3E4327A601D1BC8CC533A51F78321FA727729A1A8871ABF930E9D6F393847517791
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

107

Origin country :

Vendor Threat Intelligence

No detections

Detection(s):

Sanesecurity.Malware.31075.LX.BOT.UNOFFICIAL

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6949e34fa7163552ba03f807/reports/3b95a170-b297-4fa9-a233-835b0f1cd84c/overview

Verdict:

Unknown

File Type:

elf.32.be

First seen:

2025-12-22T22:50:00Z UTC

Last seen:

2025-12-22T22:57:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/e7049992-5035-4d60-9ddc-230afbb1d9a6

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/93dba810-4bec-495c-89f5-b12388c4f42a

Result

Threat name:

Mirai

Detection:

malicious

Classification:

troj

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1837989

Signature

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47/

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-12-23 00:33:21 UTC

File Type:

ELF32 Big (Exe)

AV detection:

2 of 36 (5.56%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=w2llj3fwcrja6pq3eozs43smzq5bzg4ozs3qluxiorjqryz675dq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/251223-awdvla1mhz/

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/83b1aa41-83d6-4415-b369-05d4cf08dc34

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b696b4ecb614520f3e1b23b32e6e4ccc3a1c9b8eccb705d2e8745308e33eff47

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.