MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803
SHA3-384 hash:	98ba3f672967d8a6a3f353747f13184bf7c20b8186fee0593f6e64387740a1142ca39edb579620f763bf3febb2a9575f
SHA1 hash:	23ac6fc11d7a60a7bdd203da7211c7b3b4915399
MD5 hash:	d3e5d7c53a8cef93ca06b6051503cf5f
humanhash:	december-alabama-eighteen-delta
File name:	cutemips
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	51'772 bytes
First seen:	2025-06-18 11:31:06 UTC
Last seen:	2025-06-19 09:20:52 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	768:63ZIehWrIehFIeh/rIeh1nFqwJAapRo8BsTbSRU9R729y4mpWeYIgrI6:GnhWphDh/ph1nH+apYTTDWeYIgrt
TLSH	T17733A71A6E319FEDF7BDC23407B7993163A8238633E19685D29CD2006F6024D585FBE9
telfhash	t1d6013118cd38a6d5ab321dd66b2cee77e05131df0a16ad378d00fd6a9a2ec125e01c0c
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6852a644d506f858d6223909linux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Connection attempt

Sends data to a server

ELF DIGEST Malicious

Verdict:

Malicious

Uses P2P?:

false

Uses anti-vm?:

false

Architecture:

mips

Packer:

not packed

Botnet:

unknown

Number of open files:

0

Number of processes launched:

3

Processes remaning?

false

Remote TCP ports scanned:

not identified

Full report:

https://elfdigest.com/brief/ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803

Behaviour

no suspicious findings

Botnet C2s

TCP botnet C2(s):

not identified

UDP botnet C2(s):

not identified

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/cc73e1ee-58ef-4c3f-9cd4-c246404fd66d

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/39e0f582-599c-4593-9aef-bf03355a104f

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1717417

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-18 11:16:37 UTC

File Type:

ELF32 Big (Exe)

AV detection:

24 of 38 (63.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5p7ycfrcy4xxtfep4l2uhfttvp2ycu54zdpwxw5nimpmnm6mpabq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250618-nm79qszthx/

Behaviour

System Network Configuration Discovery

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9854559-0

YARA:

n/a

Link:

https://app.threat.zone/submission/0d80912d-4d79-4d6e-943f-be6857ca79e5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ebff811622c72f79948fe2f5439673abf58153bcc8df6bdbad431ec6b3cc7803