MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41cc4ef5338c3f12808564505c4c1e4600dc793edd96cdba1654927986081767. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 41cc4ef5338c3f12808564505c4c1e4600dc793edd96cdba1654927986081767
SHA3-384 hash: 6605110b1ce770d6d446f7a2deea7c8a6e45435a47d5a539805512abeb310b1474c0ae1595c275ac0d7bb9816185ed5e
SHA1 hash: ac7e13c25654e0a64eeb0a83bab7ad0e3786f67c
MD5 hash: 64c95cd8daadfdf6e1157f7eb7e0fe65
humanhash: one-lima-oregon-grey
File name:64c95cd8daadfdf6e1157f7eb7e0fe65
Download: download sample
Signature Mirai
Create hunting rule
File size:62'224 bytes
First seen:2021-02-23 13:56:00 UTC
Last seen:2021-02-23 19:16:32 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:VMzVhePhrkmetvEuckIzN/hkfgiu5BWWcEAct5CjUoBiAepTLE:VMzVhePlkmetvBcxJhyu5BlActYRoAOf
TLSH 96533AC1A983DCF6DD1146B83177FF328636F436212AE9E7D7D9A923AC81E40910729D
telfhash c21138f95e7b1ce8f7e49440930e0b22666ae97b296033914633dcb421fdd8204b8c78
Reporter c3rb3ru5d3d53c2
Tags:botnet mirai


Avatar
c3rb3ru5d3d53c
Mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.Mirai-29.UNOFFICIAL
Create hunting rule

Unix.Dropper.Mirai-7135890-0
Create hunting rule

Unix.Dropper.Mirai-7135939-0
Create hunting rule

Unix.Dropper.Mirai-7136025-0
Create hunting rule

Unix.Dropper.Mirai-7355719-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/41cc4ef5338c3f12808564505c4c1e4600dc793edd96cdba1654927986081767/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2020-12-15 03:28:00 UTC
AV detection:
17 of 27 (62.96%)
Threat level:
  5/5
Result
Malware family:
mirai
Create hunting rule
Score:
  10/10
Tags:
family:echobot family:mirai linux
Link:
https://tria.ge/reports/210223-sp4dakmlkx/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Gafgyt
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/41cc4ef5338c3f12808564505c4c1e4600dc793edd96cdba1654927986081767

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Link
https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
  
Delivery method
Other
  
URLhaus
https://urlhaus.abuse.ch/url/919011/

Comments