MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 032bcce8a00a39a9264bb51ba66177486176e282da4451c614b37f7f7c2cd0d5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments 1

SHA256 hash: 032bcce8a00a39a9264bb51ba66177486176e282da4451c614b37f7f7c2cd0d5
SHA3-384 hash: 13aa7f260bada7fecc1966bbc9bae6e3fce11d69b7394b27f9cc7d5c953e1525a5b702eef1e1762e754037c3f2088dc0
SHA1 hash: f25040bb9f93706f4d3448a7f052ebb9a0f95249
MD5 hash: a6a0807f74b178805d4065934f022a6e
humanhash: early-eight-low-west
File name:a6a0807f74b178805d4065934f022a6e
Download: download sample
Signature Mirai
File size:48'268 bytes
First seen:2022-04-10 10:26:47 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:MILmQU8Fug1UrvDjSS2xYOx+2bziW9WX2yF4GuJnHbtwpYMS1HKKlvqBJ5e20y6K:e8IgSrbjSSF0iJ2yF4Vn7twqZ1HXlL
TLSH T133231996BC91DA0AC6D023B6BD6F60EE330163DAD2EE3247DC145F2476CA90F0E67645
telfhash t1b5e07200ec798b2c4cdbaab48d9d0ba48a01222224960b00cf10daf0c83f444e30ceaf
Reporter zbetcheckin
Tags:32 arm elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
259
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
anti-debug mirai
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
MALICIOUS
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2022-04-10 10:27:04 UTC
File Type:
ELF32 Little (Exe)
AV detection:
17 of 26 (65.38%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 032bcce8a00a39a9264bb51ba66177486176e282da4451c614b37f7f7c2cd0d5

(this sample)

  
Delivery method
Distributed via web download

Comments



Avatar
zbet commented on 2022-04-10 10:26:51 UTC

url : hxxp://2.56.59.37/bins/arm5