MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 06e08a407e1fc329e3d0f4ecf1d057b2dfc1abffd27e5a530ac9b2ef96af5038. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments

SHA256 hash: 06e08a407e1fc329e3d0f4ecf1d057b2dfc1abffd27e5a530ac9b2ef96af5038
SHA3-384 hash: 9b08b4b7a5ca7a885857b8beabe7de091e8c60fb4924b2b97229eb77ad67972a555cb47ef383c2a75781c636e392f690
SHA1 hash: 9bff259fa0ffa45a76b283335d9b3b4d59843663
MD5 hash: 789d7f1b0f0ca3ace1878900d30449c9
humanhash: oregon-violet-violet-south
File name:Aqua.mips
Download: download sample
Signature Mirai
File size:108'335 bytes
First seen:2025-03-07 15:37:10 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:2B9P7Dxo0N66wSdjcq/B5IxFrLdIqGcuEvdeFx7JFEVPGF92s5viRSQ8:SaEvIzLKAwEVPGFXMSQ8
TLSH T180B3821E6E328F3DFBA8873447B78E65975C33D62691D585E0ACD2011E2029E741FFA8
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
83
Origin country :
DE DE
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
masquerade
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Result
Malware family:
Score:
  10/10
Tags:
family:mirai discovery
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 06e08a407e1fc329e3d0f4ecf1d057b2dfc1abffd27e5a530ac9b2ef96af5038

(this sample)

  
Delivery method
Distributed via web download

BLint


The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.

Findings
IDTitleSeverity
CHECK_NXMissing Non-Executable Memory Protectioncritical
CHECK_PIEMissing Position-Independent Executable (PIE) Protectionhigh

Comments