MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2bf89937178ca7d5e25f71d74d1c3786160c9c0c59bad529c64063363fdcbb85. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2bf89937178ca7d5e25f71d74d1c3786160c9c0c59bad529c64063363fdcbb85
SHA3-384 hash: 3c18b6d652b45a84d448a9a4bdbff4b587b41011a2adf553efe31f011992e0404a6f0cb8050583690372634f5a89e08a
SHA1 hash: 95e9620f66481c35dfe404f1c8acf4b2ed11c3e3
MD5 hash: 84a8476c7a7bedf6e1531c0c7fca56ef
humanhash: mountain-xray-muppet-autumn
File name:SecuriteInfo.com.Linux.DownLoader.534.10251.31196
Download: download sample
File size:1'192 bytes
First seen:2020-11-13 00:40:06 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 24:wCVm4llns9wdGtSnUpzzbBWpzm0RTQ5gDrmwWD1FGgkC7m17M8ENfu:wal/sOdxnUpzzbBWpzm0RBDrmwWD1Agi
TLSH D3213242E5C59DA4CF18D73C4E711B517B06D938C80BE3CE4E0C86B9283B28C6AD40E4
Reporter SecuriteInfoCom

Intelligence

File Origin
# of uploads :
1
# of downloads :
120
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.DownLoader.534.10251.31196.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2bf89937178ca7d5e25f71d74d1c3786160c9c0c59bad529c64063363fdcbb85/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2020-11-12 23:18:37 UTC
AV detection:
11 of 29 (37.93%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201113-gk8sn5dd1s/
Behaviour
Modifies registry class
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of WriteProcessMemory
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

elf 2bf89937178ca7d5e25f71d74d1c3786160c9c0c59bad529c64063363fdcbb85

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/811792/
  
Delivery method
Distributed via web download

Comments