MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eb491a07b5784000693b4371156ca189c9236fc898660f9a9c18e68f4c229704. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	eb491a07b5784000693b4371156ca189c9236fc898660f9a9c18e68f4c229704
SHA3-384 hash:	c42daa9d8be81fe8df913db5a214938b2d2e154b8cbb9839c21431bdd55e3690820dcf1d0a49d8f677cbea9ae0903b01
SHA1 hash:	c3c01c7811ccade0a6fca650da3661ee24be64ec
MD5 hash:	59275699ab059f976c3988cd821afd82
humanhash:	delta-delaware-chicken-bacon
File name:	Hilix.spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	53'378 bytes
First seen:	2026-02-01 07:11:37 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:YnAQmo7pNdhdx74xyXuDx5CEbx1WXhUIBuFoqV4SQ5QkO+uv+m:6AQmapzZqy+DxkEbx1WRUIRqV4SQG+Hm
TLSH	T19933293ABE752A1BC4D8547E25F78328F1F5528E28E8C60F7C620E5EFF6051025672B9
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

69

Origin country :

DE

Vendor Threat Intelligence

ACCE

Gathering data

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

masquerade mirai

Link:

https://www.filescan.io/uploads/697efcd7c9bfb60ece1a08a5/reports/d4dcb306-de9d-4427-8e5e-40e5be2683d4/overview

InQuest

Result

Gathering data

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/92374de3-701a-440a-909b-9001ce05a118

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/92af75b6-fcc5-4a5d-b992-ccaba520b44b

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1861105

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/eb491a07b5784000693b4371156ca189c9236fc898660f9a9c18e68f4c229704

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/eb491a07b5784000693b4371156ca189c9236fc898660f9a9c18e68f4c229704/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-02-01 07:12:46 UTC

File Type:

ELF32 Big (Exe)

AV detection:

7 of 36 (19.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5nerub5vpbaaa2j3inyrk3fbrhesg36itbta7gu4ddti6tbcs4ca._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/260201-h1pfwsc12e/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/eb491a07b5784000693b4371156ca189c9236fc898660f9a9c18e68f4c229704