🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash cef2b37770f2fb9397ffd4cdaf4c077519306b8b113c0e88b0d2b4ed1b7e5a16.

Scan Results

SHA256 hash: cef2b37770f2fb9397ffd4cdaf4c077519306b8b113c0e88b0d2b4ed1b7e5a16
File size:126'016 bytes
File download: Original
MIME type:application/x-executable
MD5 hash: e0e1b078f8ddc49f2b8862fd62751873
SHA1 hash: fc2f456cf7413992cfa79af58f3badf37981bb0c
SHA3-384 hash: 6768a9241679318b306e5caa5c618e63d09a51b344bac0179d40a41e3c2904432f7b1c0e3308f7139d1878c32c732c2d
First seen:2026-09-19 11:18:17 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ1v:p3lOYoaja8xzx/0wsxzv
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:d005a416-b41b-11f1-a0cd-42010aa4000b
File name:cef2b37770f2fb9397ffd4cdaf4c077519306b8b113c0e88b0d2b4ed1b7e5a16.elf
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Linux.Mirai-63.UNOFFICIAL
Create hunting rule
Signature:Unix.Dropper.Mirai-9998760-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10011765-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10012497-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10012843-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10013712-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10014867-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10014868-0
Create hunting rule
Signature:Unix.Trojan.Mirai-10016231-0
Create hunting rule
Signature:Unix.Trojan.Mirai-9843255-0
Create hunting rule
Signature:Unix.Trojan.Mozi-10001545-0
Create hunting rule
Signature:Unix.Trojan.Mozi-10014131-0
Create hunting rule
Signature:Unix.Trojan.Mozi-10023820-0
Create hunting rule
Signature:Unix.Trojan.Mozi-9840825-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:ELF_IoT_DVR_Botnet_Hama_UPX
Create hunting rule
Author:Serhii Kocherhan
Description:Detects packed and unpacked ELF IoT/DVR botnet variants targeting UPX compression structures and uncompressed code
TLP:TLP:WHITE
Repository:YARAify
Rule name:linux_generic_ipv6_catcher
Create hunting rule
Author:@_lubiedo
Description:ELF samples using IPv6 addresses
TLP:TLP:WHITE
Repository:Stratosphere
Rule name:Linux_Packer_Patched_UPX_62e11c64
Create hunting rule
Author:Elastic Security
Reference:https://cujo.com/upx-anti-unpacking-techniques-in-iot-malware/
TLP:TLP:WHITE
Repository:elastic
Rule name:TH_Generic_MassHunt_Linux_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Generic Linux malware mass-hunt rule - 2026
Reference:https://cyfare.net/
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.