MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 13009a7fdf1de6e85e19b042afe791c7bc4e06cb8961a20bf31d98d3d2a18081. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 9

Intelligence 9 IOCs YARA 2 File information Comments

SHA256 hash:	13009a7fdf1de6e85e19b042afe791c7bc4e06cb8961a20bf31d98d3d2a18081
SHA3-384 hash:	9052d188ae2e5d4e60e5fd94d9927aca89c23bf4cb25fdad29a0b0b66f637ee77f761df2e4765568dd4a547e18d2a473
SHA1 hash:	a433bf36d613392f101cc9e1d38364d29df52003
MD5 hash:	3736766cbe2418f687b8f3f8bed03f20
humanhash:	edward-papa-low-sweet
File name:	arc
Download:	download sample
Signature	Mirai Create hunting rule
File size:	116'116 bytes
First seen:	2025-03-06 15:01:40 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	3072:nV11n3qNUg44+wXQ2VCDj7SaCIbDi9C4doMYZnRLq:nVXqNW1p7SaBj4Yq
TLSH	T15AB3AE9BB74B5450C82247F40BD78BDD3E6332529E27D8E36C1E653E39BA2DB4806781
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Detection(s):

Sanesecurity.Malware.31075.LX.BOT.UNOFFICIAL

Unix.Trojan.Mirai-9885259-0

Unix.Trojan.Gafgyt-9940653-0

Unix.Trojan.Gafgyt-6735924-0

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c9ba99c8d04e92a4bf6333linux22vpnfull_triage

Tags:

mirai ddos

Verdict:

Suspicious

Threat level:

5/10

Confidence:

100%

Tags:

android mirai

Link:

https://www.filescan.io/uploads/67c9b8f33c5f644bd9466008/reports/cfc97488-c5d3-4e4e-9995-5f87279adecf/overview

Result

Verdict:

UNKNOWN

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/f7559d6b-9dc3-4260-ac45-a75902a7d612

Result

Threat name:

Mirai

Detection:

malicious

Classification:

troj

Score:

64 / 100

Link:

https://www.joesandbox.com/analysis/1631067

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/13009a7fdf1de6e85e19b042afe791c7bc4e06cb8961a20bf31d98d3d2a18081

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/13009a7fdf1de6e85e19b042afe791c7bc4e06cb8961a20bf31d98d3d2a18081/

Threat name:

Linux.Backdoor.Mirai

Status:

Malicious

First seen:

2025-03-06 02:29:27 UTC

File Type:

ELF32 Little (Exe)

AV detection:

16 of 24 (66.67%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cmaju767dxtoqxqzwbbk7z4ry66e4bwlrfq2ec7tdwmnhuvbqcaq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/250306-sehrbs1vcy/

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9885259-0

YARA:

n/a

Link:

https://app.threat.zone/submission/3c56aa1f-b745-4e22-8d9e-39a321eee178

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/13009a7fdf1de6e85e19b042afe791c7bc4e06cb8961a20bf31d98d3d2a18081

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.