MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5
SHA3-384 hash: 4c0523412772aaae94a4c46057b640fca89ea74799c7b1e66c9e8fad5128b61c3d406c538ddf1ad7050b9fd5471671db
SHA1 hash: 68a70e9b858f38843d6f1086d81c46f14a828c41
MD5 hash: 49b6aa0522e569ed49efb35ccdc155ce
humanhash: nitrogen-fillet-snake-music
File name:49b6aa0522e569ed49efb35ccdc155ce
Download: download sample
Signature Mirai
Create hunting rule
File size:834'656 bytes
First seen:2021-06-19 21:03:00 UTC
Last seen:2021-06-19 21:36:15 UTC
File type: elf
MIME type:application/x-executable
ssdeep 24576:qPevQ5Xf90tpNognnykBa6j1BmocAFfYY:1K90jNlnjx1kY
TLSH 3F0523E397D548EB8E5479AAB8F960183CC05A98BDD12F9EC18BCF1B8572C4178583DC
Reporter zbetcheckin
Tags:32 elf mips mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.Siggen.3980.3879.23096.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
UPX
Botnet:
Number of open files:
7
Number of processes launched:
1
Processes remaning?
false
Full report:
https://elfdigest.com/brief/18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5
Result
Verdict:
UNKNOWN
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/c3c957e8-4c80-43f7-8dcd-484c3cb615d9
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2021-06-19 06:11:29 UTC
AV detection:
11 of 29 (37.93%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  9/10
Tags:
linux persistence
Link:
https://tria.ge/reports/210619-7lbtrf4py2/
Behaviour
Reads runtime system information
Reads system network configuration
Enumerates active TCP sockets
Modifies rc script
Modifies the Watchdog daemon
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.20
Link:
https://yomi.yoroi.company/submissions/18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 18da649d4c37578ad2c4ca0cecc39c277de91d650652acdf2a71dd7e60e65db5

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/1380464/

Comments