MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f93ca9d28a68c9b62dfb3d3756d1ec029e54ba881f9d3f54e9eeea976f1232a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4f93ca9d28a68c9b62dfb3d3756d1ec029e54ba881f9d3f54e9eeea976f1232a
SHA3-384 hash:	27a20a966406526ede148fa24ce1b181928aae69763e30c03a7ffe17f1c355cfbca824c8d93f5c527d15dc032232f0c6
SHA1 hash:	ab0ec601e6feba10075491712e46e771afeaa7e7
MD5 hash:	14da400c325fe207a2dfb4723cc3e87f
humanhash:	batman-bulldog-kilo-bluebird
File name:	jew.ppc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	71'176 bytes
First seen:	2024-12-06 13:15:49 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:EGfWJcRyNYciiv1da2PHS3g4JQsA42THyd42+I:VfNyNCivXIZ
TLSH	T1B1632B023324095BE9E25EB0263F1BE183BEED4216F0724A694FEF654636E721446FDD
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

112

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135939-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7136025-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9964459-0

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

95.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6752f92419fba9940b497e1alinux22vpnfull_triage

Tags:

mirai virus

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Runs as daemon

Connection attempt

Receives data from a server

Opens a port

Sends data to a server

Substitutes an application name

Performs a bruteforce attack in the network

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug masquerade

Link:

https://www.filescan.io/uploads/6752f91f97fd4c6c7d42c308/reports/1bc4d8ba-e296-4430-8936-d18f4619eabb/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/655b3fb7-8e8d-439e-a880-2163c48aa806

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1570040

Signature

Antivirus / Scanner detection for submitted sample

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/4f93ca9d28a68c9b62dfb3d3756d1ec029e54ba881f9d3f54e9eeea976f1232a

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/4f93ca9d28a68c9b62dfb3d3756d1ec029e54ba881f9d3f54e9eeea976f1232a/

ReversingLabs TitaniumCloud Linux.Trojan.Mirai

Threat name:

Linux.Trojan.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-06 14:13:10 UTC

AV detection:

17 of 24 (70.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=j6j4vhjiu2gjwyw7wpjxk3i6yau6ks5iqh45h5kot3xks5xremva._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:kurc linux

Link:

https://tria.ge/reports/241206-qhsplavmer/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Dropper.Mirai-7135870-0

YARA:

n/a

Link:

https://app.threat.zone/submission/bec459f1-d7ee-435b-827b-fac8827ab6ba

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/4f93ca9d28a68c9b62dfb3d3756d1ec029e54ba881f9d3f54e9eeea976f1232a