MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 130c8fc7a6e5e3a0f3bd8c2bbf231af16a478603706d7f670f3eb0f0742d78ad. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 8

Intelligence 8 IOCs YARA 1 File information Comments 1

SHA256 hash:	130c8fc7a6e5e3a0f3bd8c2bbf231af16a478603706d7f670f3eb0f0742d78ad
SHA3-384 hash:	7d537c9bdd7cbe3e41bd9023ed06f35094b04ba9e0faa1f264c59d3592da1fa561590c40505aa93211cbcff72f4cd9db
SHA1 hash:	d74f28ae8f403a5ff336986d5cead17b6eb4390a
MD5 hash:	3269d259e15e21443a2e1e7e83d45e45
humanhash:	grey-north-pasta-yellow
File name:	3269d259e15e21443a2e1e7e83d45e45
Download:	download sample
Signature	Mirai Create hunting rule
File size:	85'248 bytes
First seen:	2024-04-23 14:41:24 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:41LJvCyEpMADod2480ydtklqtfCYi5Y4Tjr/ZDLl+xUwwCF:WLJqpmADod2iydtkVYoYG5l+xbZF
TLSH	T1BA833AD7F400ED7DFC0ED77B4853490AB671A3A156831B3A3367B963AD321A44926F82
Reporter	zbetcheckin
Tags:	32 elf mirai motorola

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Result

Verdict:

MALICIOUS

Malware family:

Mirai

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/ea8a7918-9b1c-4816-b365-980a35459d75

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1430430

Signature

Multi AV Scanner detection for submitted file

Sample deletes itself

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/130c8fc7a6e5e3a0f3bd8c2bbf231af16a478603706d7f670f3eb0f0742d78ad

Detection:

mirai

Link:

https://mwdb.cert.pl/sample/130c8fc7a6e5e3a0f3bd8c2bbf231af16a478603706d7f670f3eb0f0742d78ad/

Threat name:

Linux.Trojan.Mirai

Status:

Malicious

First seen:

2024-04-23 14:42:08 UTC

File Type:

ELF32 Big (Exe)

AV detection:

12 of 24 (50.00%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cmgi7r5g4xr2b455rqv36iy26fvepbqdobwx6zyph2ypa5bnpcwq._file

Result

Malware family:

n/a

Score:

1/10

Tags:

linux

Link:

https://tria.ge/reports/240423-r211raha9x/

Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.