MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 9

Intelligence 9 IOCs YARA 2 File information Comments

SHA256 hash:	d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f
SHA3-384 hash:	56d304f70927db438157e60fb3f82756501ab190806f9e14fb5cbf7613cb5b2dac0812c38657ff2ab2f30d9826e8f162
SHA1 hash:	33c9b71674ac06ffa92f1ce706842f1f5335fd0a
MD5 hash:	f514d43aad396849047a6ef47174902e
humanhash:	connecticut-july-april-rugby
File name:	pspc
Download:	download sample
Signature	Mirai Create hunting rule
File size:	75'248 bytes
First seen:	2025-10-19 09:36:49 UTC
Last seen:	2025-10-20 15:25:16 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:UQXSCkbFJmAESjXfDIxPQoto8uNM5t0/lREEuzt+Wm:BieAXmijN8q/n+m
TLSH	T189735C32B9761D27C4D0A87A61F34725F2F2079B25AC8A1A3DB10D4EBF35A4032577B6
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

144

Origin country :

Vendor Threat Intelligence

Detection(s):

Unix.Trojan.Mirai-9858729-0

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Tags:

lolbin remote

Link:

https://www.filescan.io/uploads/68f4b18f3a79800405eacacf/reports/16306c34-16b5-4dc7-adde-c88c2343ec90/overview

Verdict:

Malicious

File Type:

elf.32.be

First seen:

2025-10-19T06:56:00Z UTC

Last seen:

2025-10-20T18:47:00Z UTC

Hits:

~100

Detections:

HEUR:Backdoor.Linux.Mirai.b

Link:

https://opentip.kaspersky.com/d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f/results?tab=lookup

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/94f89a1e-1e4b-416f-a967-0dcbb3ad1e8e

Behavior Graph:

Download SVG

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/7b01e377-32fa-4f1e-acbd-ba448bd9e10c

Result

Threat name:

Mirai

Detection:

malicious

Classification:

troj.evad

Score:

68 / 100

Link:

https://www.joesandbox.com/analysis/1797879

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample deletes itself

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f

Detection:

mirai

Link:

https://mwdb.cert.pl/sample/d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f/

Verdict:

Malicious

Threat:

Family.MIRAI

Link:

https://tip.neiki.dev/file/d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f

Threat name:

Linux.Worm.Mirai

Status:

Malicious

First seen:

2025-10-19 09:34:15 UTC

File Type:

ELF32 Big (Exe)

AV detection:

16 of 24 (66.67%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2lftylwtpaljvy55syrxwnj46sedgaolnux2rhefoq4i45koxz7q._file

Result

Malware family:

mirai

Score:

10/10

Tags:

family:mirai botnet:mirai linux

Link:

https://tria.ge/reports/251019-ll69yafq7z/

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/04eff9b8-eec3-4f1e-9cde-4bd97114179c

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d2cb3c2ed378169ae3bd96237b353cf4883301cb6d2fa89c8574388e754ebe7f

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.