MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a
SHA3-384 hash:	75ac7dca79fc1bce66a209ce3a58584ac520d149007f69d91114398f36708555df1c339e7e8732fc7c9b44ad0ad841b4
SHA1 hash:	2a1168ff06915dcec137062a37f41c38fd5af43b
MD5 hash:	e8f192ee66746fcda272f7cef4369b03
humanhash:	east-nineteen-jig-foxtrot
File name:	agetty
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	99'832 bytes
First seen:	2025-07-17 17:32:33 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:Yow4+9OHp8gEpb9P+syvt+9YM59S38QtBB9G4pd:Nw7O5Ub9Pb4w9Y8nSBc4H
TLSH	T151A34B22FA190927C4E8617621F78331F5F353DA14788A0A7EB24E8D7F246443667EF6
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

24

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.29052.TSource.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

obfuscated

Link:

https://www.filescan.io/uploads/687933e37bc45bdee1b000e8/reports/d0725229-aa44-4c73-8cfd-ba20d1764194/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/322f65e8-1452-4ae8-88d6-509e5a881f32

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/1502995f-c9e5-47f4-934f-733632175bb4

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

troj.evad

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1738992

Signature

Connects to many ports of the same IP (likely port scanning)

Multi AV Scanner detection for submitted file

Terminates several processes with shell command 'killall'

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a/

Neiki Linux.Worm.Mirai

Verdict:

Malicious

Threat:

Linux.Worm.Mirai

Link:

https://tip.neiki.dev/file/0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-17 17:33:22 UTC

File Type:

ELF32 Big (Exe)

AV detection:

19 of 38 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bzgum6hh6wrpkoiadcnn6hyc4wikudzwxtzekyxrittdi433dm5a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250717-v4z31sdr2y/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/2213f8f2-317c-4166-adba-e24783a59509

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0e4d4678e7f5a2f53900189adf1f02e590aa0f36bcf24562f144e634737b1b3a