MALICIOUS — dc87aeac1008620a4587df7d0cb91ec55e55e675f994b988476258fe117d537c.bin

MALICIOUS — dc87aeac1008620a4587df7d0cb91ec55e55e675f994b988476258fe117d537c.bin is a elf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (96/100), attributed to the Mirai family. 3 of 56 detection engines flagged it.

Identification

• SHA-256: dc87aeac1008620a4587df7d0cb91ec55e55e675f994b988476258fe117d537c
• SHA-1: b568c169f6b44a3423fb553d83998106a07abbd2
• MD5: edfd99fd9440902e7d47f43005d5a870
• ssdeep: 1536:ob4o+aQVgsu5xP1IfckZoytdTw9wjBaY3mrD/JdJJJ08xRB:ob4faOgB5LlkuytNwyjBaYU/7Z0g
• TLSH: T17D3B4B229A4A1044E6368ED69C80493E0BCE09ADCD1D9FEC6F8F5E93044F6D76DB00D9
• Submitted as: dc87aeac1008620a4587df7d0cb91ec55e55e675f994b988476258fe117d537c.bin
• File type: elf · Size: 106580 bytes
• Verdict: malicious (96/100) · Family: Mirai

Source: MalShare · first seen 2026-10-15T18:37:22.565Z · SHA-256 verified

Detections (3 of 56 engines)

• ClamAV (daily): Unix.Trojan.Mirai-10008934-0
• Microsoft Defender: Backdoor:Linux/Mirai.AW!xp
• Kaspersky (KVRT): HEUR:Backdoor.Linux.Mirai.jw

Why this verdict

The malicious score of 96/100 is the fusion of 3 weighted signals:

• ClamAV (daily) flagged Unix.Trojan.Mirai-10008934-0 (rule Unix.Trojan.Mirai-10008934-0) - engine signal, weight 0.90, confidence 0.95
• Microsoft Defender flagged Backdoor:Linux/Mirai.AW!xp (rule Backdoor:Linux/Mirai.AW!xp) - engine signal, weight 0.55, confidence 0.85
• Kaspersky (KVRT) flagged HEUR:Backdoor.Linux.Mirai.jw (rule HEUR:Backdoor.Linux.Mirai.jw) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis (linux)

816 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• ff02::1
• 10.240.0.1
• 10.240.0.76
• ff02::16
• ff02::2
• ff02::1:ff12:3456
• 255.255.255.255

Embedded domains

• wget.sh
• tftp.sh
• ftpget.sh
• curl.sh
• www.example.com

More Mirai samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report