MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 28b6f2ba28fb5781821f768d56a7c471bf23fab3af4b9849858770d92b1102d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	28b6f2ba28fb5781821f768d56a7c471bf23fab3af4b9849858770d92b1102d7
SHA3-384 hash:	4f56cd7f78bfdcd5b2ff178391119031674add168dfaebf020877f8e379143eef435a09d30b09407a25658e61f6b5b17
SHA1 hash:	ad46c8dbb644bada8d85f2b5cc7608b6a498a3a5
MD5 hash:	67f12abc00a219d1e522b8db4979f10a
humanhash:	stairway-carpet-timing-fillet
File name:	67f12abc00a219d1e522b8db4979f10a
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'192 bytes
First seen:	2024-02-11 11:20:49 UTC
Last seen:	2024-02-11 13:34:17 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24:wCVm4llns9wdGtSnUpzzbBWpzmK+leKD5gDrmgjvGgkC7m172Nfu:wal/sOdxnUpzzbBWpzmK+3ODrmgjvGgG
TLSH	T1E1213243B5C59DA8CF18D73C8EB11750BB16D524C84BE3CE0F0C5BB5692F28C6994094
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Reporter	zbetcheckin
Tags:	32 elf mirai renesas

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

91

Origin country :

FR

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.534.28091.31902.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

anti-debug

Link:

https://www.filescan.io/uploads/65c8ad9f02d5be924b62c976/reports/6be7f1ed-4bed-4ed1-b1c6-19265971caaa/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Intezer Malicious

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/c25419f2-af67-4737-a07e-b67650f4366a

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1390337

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/28b6f2ba28fb5781821f768d56a7c471bf23fab3af4b9849858770d92b1102d7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/28b6f2ba28fb5781821f768d56a7c471bf23fab3af4b9849858770d92b1102d7/

ReversingLabs TitaniumCloud Linux.Trojan.Mirai

Threat name:

Linux.Trojan.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-02-11 11:21:04 UTC

File Type:

ELF32 Little (Exe)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fc3pfori7nlydaq7o2gvnj6eog7sh6vtv5fzqsmfq5ynskyrallq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/240211-nfzn1sff21/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/28b6f2ba28fb5781821f768d56a7c471bf23fab3af4b9849858770d92b1102d7

Comments

---

Login required

You need to login to in order to write a comment. Login with your abuse.ch account.

zbet commented on 2024-02-11 11:20:50 UTC

url : hxxp://194.169.175.30/dlr.sh4