MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 8

Intelligence 8 IOCs YARA 1 File information Comments

SHA256 hash:	1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f
SHA3-384 hash:	e07b1d2b26c5f61ccc061160abc7bdb3d5688299980b3e6a8d5a7084f54421c045bf76abca809cb510b0536bf6800570
SHA1 hash:	33de7a41a12a70f907c6fb407496a3cf293bf66e
MD5 hash:	5ec67ca0ee2a6059375e8ce34f5e4351
humanhash:	wisconsin-spring-stream-juliet
File name:	create.py
Download:	download sample
Signature	Mirai Create hunting rule
File size:	2'868 bytes
First seen:	2024-08-27 17:10:54 UTC
Last seen:	Never
File type:
MIME type:	text/plain
ssdeep	48:EbyNhKN9PhzL0lNgcLfXPcz9PYLBNEyX/eqyEvXWkDAiXVn:EbIYN9JcvgQfXU9Y/Xm0XW0XV
TLSH	T19D51B3DD77D225738B74DE52E71682E660C2B0559110AFE8B897E0387CE7DC8FA81A18
Magika	python
Reporter	NDA0E
Tags:	404 mirai py

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

Vendor Threat Intelligence

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66cf53d6f1a57bfb709138c9

Tags:

Miraia

Verdict:

Suspicious

Threat level:

5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/66ce08b05959a837dd114447/reports/0a8fc3c1-fd0b-47b5-ba1d-9920033a9edd/overview

Verdict:

Malicious

Labled as:

Bash.MiraiA.Generic

Link:

https://www.hybrid-analysis.com/sample/1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f

Result

Verdict:

MALICIOUS

Score:

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f/

Threat name:

Script-Shell.Downloader.MiraiA

Status:

Malicious

First seen:

2024-08-27 18:17:24 UTC

File Type:

Text (Shell)

AV detection:

7 of 24 (29.17%)

Threat level:

3/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=d4ahpkc5shcdbeaxrg3z37ncvgd7f2d233c575vyazgb6e7jgrhq._file

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/1f0077a85d91c430901789b79dfda2a987f2e87adec5dff6b8064c1f13e9344f

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.