MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538
SHA3-384 hash:	8099ecdf542c83a316900706470228579e7148a4f9b5084dbe1ce6f72dda2202c7ccbae1b96542f0d60a6a7f5638ec9b
SHA1 hash:	c225c8871deafc184a45eda37fff05c85dfea8e8
MD5 hash:	408735484458773b9f4feb8b8971ca83
humanhash:	eleven-india-single-two
File name:	9a37429d057b3650f77520b37103536af70133efcecd8298c7a3de17d7c683ce.zip
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	28'673 bytes
First seen:	2026-10-26 08:29:12 UTC
Last seen:	2026-11-03 09:11:18 UTC
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: infected
ssdeep	768:CziFQwkP9VezO4f6k+v7cgfBQLQT80XbuNvWKV2alWTRX7:CgQy9K7cgKLpcK5/V2GWTh7
TLSH	T131D2E1A6569DB4E4F46C86B365103B8381125DEEBEEB4F64660C21417F94EE062B074A
Magika	zip
Reporter	DarkDataLabs
Tags:	mirai

Intelligence

---

File Origin

# of uploads :

9

# of downloads :

102

Origin country :

US

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/f5423d01-ba11-4844-9982-c57d2864709b/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6adf0f945a22ac805bda55bc

Tags:

n/a

DocGuard Unknown

Result

Verdict:

Unknown

File Type:

ZIP File

Link:

https://app.docguard.net/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538/results/dashboard

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

mirai packed upx

Link:

https://www.filescan.io/uploads/6adf1de6d63689f639142a66/reports/971852a1-75c6-49f3-bfce-87e23601bf0a/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

zip

Link:

https://opentip.kaspersky.com/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

Elf Executable Executable Zip Archive

Link:

https://app.malva.re/file/408735484458773b9f4feb8b8971ca83

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=7qv3vwmjcdtpnqjnivienng5wugqb2kmroznxdh5d27cqw5hku4a._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:condi botnet defense_evasion discovery linux upx

Link:

https://tria.ge/reports/261026-lev84aag66/

Behaviour

Changes its process name

Writes file to system bin folder

Modifies Watchdog functionality

Contacts a large (54918) amount of remote hosts

Creates a large amount of network flows

Family: Mirai

Malware Config

C2 Extraction:

208.87.241.147

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.20

Link:

https://yomi.yoroi.company/submissions/fc2bbad98910e6f6c12d455046b4ddb50d00e94c8bb2db8cfd1ebe285ba75538