MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e0e66d83469487cd3fcab72ea1db5a48d51ccd3ec94233201b594de44c4a8328. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e0e66d83469487cd3fcab72ea1db5a48d51ccd3ec94233201b594de44c4a8328
SHA3-384 hash:	5ef13e10120406fa2cd59e230f817e463874d6419523cb166fd9cc84aa5dcb03575c8804a2115cab6877f923497fdb07
SHA1 hash:	55a2184da9e0bbb37e5a9ee660d16a2548380142
MD5 hash:	2423ae22d3c23eeb12a2bc31bc0a716c
humanhash:	kentucky-alpha-ohio-fish
File name:	powerpc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	58'940 bytes
First seen:	2025-06-21 04:42:43 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:fCHqMIXin3GP8u4VB1NGY4VmCHUoq4WQfSLSfYo1RH9O3rt:6HqM2s3TzxNUTYAAt
TLSH	T15E434C01BB28085BE5E35DB03A3F27E187EA9E5130F45108395FFB49EA71D31498AED9
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

73

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30456.LC.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-9853181-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9854559-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9885101-0

Alert

Create hunting rule

Unix.Malware.Mirai-9896989-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9899908-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68563865affecf6a2c0565eelinux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Creating a file

Connection attempt

Sets a written file as executable

Launching a process

Creates directories

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

android lolbin mirai remote

Link:

https://www.filescan.io/uploads/6856384d3faf8fcd7d3970bf/reports/d8ce0d03-a0e3-42a5-94d6-71be3d455ed7/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/99326930-b60e-4edb-8d35-71e9e7190fea

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/5c47f1f7-ec54-432d-ac47-6f6bbf91ee04

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1719770

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/e0e66d83469487cd3fcab72ea1db5a48d51ccd3ec94233201b594de44c4a8328

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e0e66d83469487cd3fcab72ea1db5a48d51ccd3ec94233201b594de44c4a8328/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-21 04:43:21 UTC

File Type:

ELF32 Big (Exe)

AV detection:

24 of 38 (63.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4dtg3a2gssd42p6kw4xkdw22jdkrztj6zfbdgia3lfg6itckqmua._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250621-fb5qgaysbx/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9853181-0

YARA:

n/a

Link:

https://app.threat.zone/submission/8d7dd7a5-4ea3-4514-902a-19ed4aa03bb4

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/e0e66d83469487cd3fcab72ea1db5a48d51ccd3ec94233201b594de44c4a8328