MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3736659ec9a1d8f7311588258c351e28ed0b2ccae8ad23bc73808cdd1f0abb19. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 11


Intelligence 11 IOCs YARA File information Comments

SHA256 hash: 3736659ec9a1d8f7311588258c351e28ed0b2ccae8ad23bc73808cdd1f0abb19
SHA3-384 hash: 886c8df2e2ec4420333d842d4a6201848c41afbede3fd5dd6594b27e4cffd3f0544e229a79135610ce119877cd5a52e0
SHA1 hash: 77d113d3b810ef9c694c8d54183640bc21b16231
MD5 hash: d98face8717653be56f6868b27d6bc9d
humanhash: rugby-apart-ten-beryllium
File name:m68k
Download: download sample
Signature Mirai
File size:73'524 bytes
First seen:2025-03-14 14:31:20 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:awW0PKt9cwxjQ/6IXIdZzN3oD8Utia84GLf84Eo5WOK+7c4R6yN:awsgYdZzNoFtijjESWBryN
TLSH T153732ADAB800DEBCF40ADAB68557490BF531A3518E930F36662BFD837D720A44D27D86
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
89
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
lolbin remote
Result
Verdict:
MALICIOUS
Result
Threat name:
Detection:
malicious
Classification:
troj
Score:
64 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Yara detected Mirai
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1638626 Sample: m68k.elf Startdate: 14/03/2025 Architecture: LINUX Score: 64 18 13.11.146.160 XEROX-WVUS United States 2->18 20 13.19.49.40 XEROX-WVUS United States 2->20 22 98 other IPs or domains 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 28 Yara detected Mirai 2->28 8 m68k.elf 2->8         started        signatures3 process4 process5 10 m68k.elf 8->10         started        process6 12 m68k.elf 10->12         started        14 m68k.elf 10->14         started        16 m68k.elf 10->16         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-03-14 14:32:12 UTC
File Type:
ELF32 Big (Exe)
AV detection:
17 of 24 (70.83%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:wicked linux
Verdict:
Malicious
Tags:
Unix.Trojan.Mirai-6981989-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 3736659ec9a1d8f7311588258c351e28ed0b2ccae8ad23bc73808cdd1f0abb19

(this sample)

  
Delivery method
Distributed via web download

Comments