MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22
SHA3-384 hash:	4f31aa5eb3276452463443123d4ef18fcc6fe8952253764ab3234f97e0f24aa613333c82ce82ac80270b6eaccc169407
SHA1 hash:	3ab59f8e62991ed7626491eae643220f5cc5d669
MD5 hash:	da7cf81c43a79620ea87a4d4852fdff9
humanhash:	mississippi-grey-echo-fourteen
File name:	spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	72'660 bytes
First seen:	2025-11-29 22:17:45 UTC
Last seen:	2025-11-30 10:55:52 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	768:IcowEe26GLAhfg+MhN2K1sv11FN1nD3Id1pvPnh3Ei3iaJbyqCDSgPoGO+75ZLo0:IcIMlhfgNhNvRPntVypX75mUotQ/
TLSH	T1C4636B21B8391E1BC0E4957A22F7872AB2F9534E24E4862E3E750F8EFF5558076472F1
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

112

Origin country :

DE

Vendor Threat Intelligence

ACCE Mirai_Botnet_XOR_Lookup

Malware configuration found for:

Mirai

Details

Mirai

an XOR decryption key and at least a c2 socket address

ClamAV Detected

Detection(s):

Sanesecurity.Malware.29504.LC.UNOFFICIAL

Alert

Create hunting rule

Unix.Dropper.Mirai-7136015-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9876194-0

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

gafgyt mirai

Link:

https://www.filescan.io/uploads/692b71242cd29ea6300344b7/reports/06026d1b-9db4-4925-b01d-c08c33fbc93e/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-11-29T16:46:00Z UTC

Last seen:

2025-11-30T01:37:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/1600ca75-9eb9-484c-907b-39b3d6518a42

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/ad523cca-aa3e-4da2-8f75-388df25177f7

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj

Score:

64 / 100

Link:

https://www.joesandbox.com/analysis/1822884

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-29 22:18:16 UTC

File Type:

ELF32 Big (Exe)

AV detection:

22 of 36 (61.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=x45wgnxongjurcv6vqu5j3mdlqnntnlzn2mcv2unj35fxuuflira._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:wicked linux

Link:

https://tria.ge/reports/251129-17z53scm2w/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Dropper.Mirai-7136015-0

YARA:

n/a

Link:

https://app.threat.zone/submission/912daa8a-2f74-4c6c-ba1f-90273b373029

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/bf3b6336ee6993488abeac29d4ed835c1ad9b5796e982aea8d4efa5bd2855a22