MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1
SHA3-384 hash: 113bbbb51f06e0e0d205151f050f7ad9c20b5d45e8cda24b749d6ca9defa22a88b3cee89fe1b69830b5e1ea30d5f53ba
SHA1 hash: fbcf23aa05768502199b459c22588c50ca285e2d
MD5 hash: f19ec10792941e569eff204cffd1a214
humanhash: carpet-island-alpha-leopard
File name:xd.arm
Download: download sample
Signature Mirai
Create hunting rule
File size:29'936 bytes
First seen:2022-03-30 22:50:05 UTC
Last seen:2022-03-30 23:36:10 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:IzPimKXHPQl8UgDMh0sFOxpu+bi8Cqqes3Uoz4:tmwHolQjBroz4
TLSH T1C9D2E03B07C6BA37CAB69875EBDAC9CB7110133941792532D55025FAF94B940B2BCA23
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
244
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.Mirai.58.15497.9034.UNOFFICIAL
Create hunting rule

Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/6244ded99253b276b7ac9cab/reports/402019f8-5768-4e79-a1a7-a2ebb08b7036/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
2.56.57.187:80/d
Number of open files:
53
Number of processes launched:
20
Processes remaning?
false
Remote TCP ports scanned:
23
Full report:
https://elfdigest.com/brief/3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1
Behaviour
Information Gathering
Botnet C2s
TCP botnet C2(s):
2.56.57.187:9506
8.26.94.147:22
UDP botnet C2(s):
not identified
Result
Verdict:
MALICIOUS
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/46ccb96d-40b2-43a0-aae1-28913e3e7b4a
Result
Threat name:
Mirai
Create hunting rule
Detection:
malicious
Classification:
troj.evad
Score:
76 / 100
Link:
https://www.joesandbox.com/analysis/967944
Behaviour
Behavior Graph:
n/a
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2022-03-30 22:51:11 UTC
File Type:
ELF32 Little (Exe)
AV detection:
17 of 26 (65.38%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/220330-2ssywsefbk/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Mirai
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 3f7092fe20ec0fc2c8f77af6be595a69d5149cbfd8c4d2280aa0fab1eaf123a1

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2123352/
  
Delivery method
Distributed via web download

Comments