MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 10dd4fb612c4658aa52a26f0451a04a8bb3e6bee755cd4fa5c6defcb9a79f776. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	10dd4fb612c4658aa52a26f0451a04a8bb3e6bee755cd4fa5c6defcb9a79f776
SHA3-384 hash:	66af3312a17997662d6a793cc7eae79afe0db9fea8b0ab03839bc1287fe5cb88e76444ac42cac31c8acecb275f0a4e12
SHA1 hash:	779ddd493cf67608d610e6a37dc278c48e37c134
MD5 hash:	80bcb451dbd62259f27b3001e27eda56
humanhash:	august-oxygen-april-lemon
File name:	agetty
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	108'048 bytes
First seen:	2025-07-18 00:24:12 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:FzEJOdoAy+ClVT9TjGSM+lt5H1YM50Wt31wGyPZx6:FzYJH+OVh/GajH1Y8X/yi
TLSH	T1C3B35D22FA66092BC4D4657A61F34330F1F7539B147C8A1B7EA20E8DBF286043567BE5
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

23

Origin country :

DE

Vendor Threat Intelligence

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

lolbin obfuscated remote

Link:

https://www.filescan.io/uploads/687994738a7d628a81b55be5/reports/1a6df969-6710-43fb-b6d1-2f56199f8223/overview

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/d0a17590-adb0-4cb0-9ac6-28b5c081f0ec

Behavior Graph:

Download SVG

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/4659c4da-9ee2-49b0-92bc-e26c19f0ae77

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

spre.troj.evad

Score:

60 / 100

Link:

https://www.joesandbox.com/analysis/1739282

Signature

Connects to many ports of the same IP (likely port scanning)

Multi AV Scanner detection for submitted file

Sample tries to kill multiple processes (SIGKILL)

Terminates several processes with shell command 'killall'

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/10dd4fb612c4658aa52a26f0451a04a8bb3e6bee755cd4fa5c6defcb9a79f776

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/10dd4fb612c4658aa52a26f0451a04a8bb3e6bee755cd4fa5c6defcb9a79f776/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-18 00:25:08 UTC

File Type:

ELF32 Big (Exe)

AV detection:

10 of 23 (43.48%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cdou7nqsyrsyvjjke3yekgqevc5t427oovonj6s4nxx4xgtz653a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250718-ap7jbsfj5z/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/9545971e-71de-43c3-ba71-0ac526fb7bc7

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/10dd4fb612c4658aa52a26f0451a04a8bb3e6bee755cd4fa5c6defcb9a79f776