MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2ea16ea1bf8e74e380b61a38b2551ccc32941da374856c2a24f65ce128bb57b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 6


Intelligence 6 File information Yara Comments
Add tag Delete this sample Report a False Positive

SHA256 hash: 2ea16ea1bf8e74e380b61a38b2551ccc32941da374856c2a24f65ce128bb57b0
SHA3-384 hash: 7686a2858042432a63dad82a3261cabb0b1b9d740da8f5269378173c9d1222ee4c428d52a102ff547e61a81c4aba8a1f
SHA1 hash: 5ab7d855357d96feda65cc4924eb36101b403b05
MD5 hash: 17f83e05972fe195edd30398413a8b84
humanhash: undress-cat-pip-bulldog
File name:17f83e05972fe195edd30398413a8b84
Download: download sample
Signature Mirai
Create hunting rule
File size:87'248 bytes
First seen:2021-02-23 19:03:17 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:jrDeYubEAmQdq+rA7QxsOfFTEY4ZaFKMFKcqZ+BqiKs61sHCCM2GTr0M8jVCXyN:jrAbEjQdDrAcxsOfF9sMccqZ+ciKs61G
TLSH F3834CC8A883D8F6DD1615713037EF368A73E1FA1118EA83E36C5BB66C51B03D546A9C
Reporter @c3rb3ru5d3d53c
Tags:botnet mirai


Twitter
@c3rb3ru5d3d53c
Mirai

Intelligence

File Origin
# of uploads :
1
# of downloads :
26
Origin country :
FR FR
Mail intelligence
No data
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.Mirai-63.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Linux.Mirai-81.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Linux.Exploit-3.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Linux.Mirai-29.UNOFFICIAL
Create hunting rule

Unix.Trojan.Mirai-7100807-0
Create hunting rule

Unix.Dropper.Mirai-7135881-0
Create hunting rule

Unix.Dropper.Mirai-7135890-0
Create hunting rule

Unix.Dropper.Mirai-7135939-0
Create hunting rule

Unix.Dropper.Mirai-7135996-0
Create hunting rule

Unix.Dropper.Mirai-7136025-0
Create hunting rule

Unix.Dropper.Mirai-7136033-0
Create hunting rule

Unix.Dropper.Mirai-7171384-0
Create hunting rule

Unix.Dropper.Mirai-7355719-0
Create hunting rule

Unix.Trojan.Mirai-8025795-0
Create hunting rule

Unix.Trojan.Mirai-9788976-0
Create hunting rule

Unix.Trojan.Mirai-9807962-0
Create hunting rule

Unix.Trojan.Mirai-9808381-0
Create hunting rule

Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/2ea16ea1bf8e74e380b61a38b2551ccc32941da374856c2a24f65ce128bb57b0/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2021-01-10 10:15:09 UTC
AV detection:
18 of 29 (62.07%)
Threat level
  5/5
Result
Malware family:
mirai_x86corona
Create hunting rule
Score:
  10/10
Tags:
family:mirai family:mirai_x86corona linux
Link:
https://tria.ge/reports/210223-g48ts5sdc6/
AV coverage:
53.23%
AV detections:
33 / 62
Link:
https://www.virustotal.com/gui/file/2ea16ea1bf8e74e380b61a38b2551ccc32941da374856c2a24f65ce128bb57b0/detection/f-2ea16ea1bf8e74e380b61a38b2551ccc32941da374856c2a24f65ce128bb57b0-1610284473
Threat name:
Gafgyt
Score:
1.00

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Link
https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
  
Delivery method
Other
  
URLhaus
https://urlhaus.abuse.ch/url/951759/

Comments