MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2e5fc35a9d523e2b9d79df4f6be295284e953c0171ea28e1b6e89098afca3313. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 2e5fc35a9d523e2b9d79df4f6be295284e953c0171ea28e1b6e89098afca3313
SHA3-384 hash: b879940d87ce5cc060f77122dcd2eaf6a1be45a3b1e3d98e774e4b3b5f530ef6cdb9816fbe76f95bcac35b5cbe029062
SHA1 hash: 8d352ec77e5bbe476b3e73690dc489eb9428f010
MD5 hash: 1736d077cdbebd46ba3a2c552189d4ff
humanhash: delta-equal-purple-beer
File name:mips
Download: download sample
Signature Mirai
File size:79'508 bytes
First seen:2025-02-21 15:46:52 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:f6RB6R6TOp2ES3T26cw/BkX2PBVh1X3JoISx0NWj5foIf6dXAz102wJ7Iiz2jNP8:aY6TOpmKK/BdPBVh1X3JoOWjyIf6dXvd
TLSH T18F735C03BB614FFAC65D933005B78B1A96E527531AE282C6E314CE21BB6535C9C1FED8
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
54
Origin country :
US US
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
gcc
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
not packed
Botnet:
unknown
Number of open files:
0
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-02-21 15:47:10 UTC
File Type:
ELF32 Big (Exe)
AV detection:
4 of 38 (10.53%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Behaviour
System Network Configuration Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 2e5fc35a9d523e2b9d79df4f6be295284e953c0171ea28e1b6e89098afca3313

(this sample)

  
Delivery method
Distributed via web download

BLint


The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.

Findings
IDTitleSeverity
CHECK_PIEMissing Position-Independent Executable (PIE) Protectionhigh

Comments