MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 51e5263b4aa537ed9b4c2f3b62fb4cfe0f4982508ed1a3e2fd0a2eda4625fd48. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 11


Intelligence 11 IOCs YARA File information Comments

SHA256 hash: 51e5263b4aa537ed9b4c2f3b62fb4cfe0f4982508ed1a3e2fd0a2eda4625fd48
SHA3-384 hash: f472e4c6f6ee72fbdde1f70a55d733ef3f158e5a5a9425eba0922d95a28acf57d4f6ae4fe88efcd8bf84ea06db6f6829
SHA1 hash: 511e35dda01737984919e6e073d4a8d51e36744f
MD5 hash: 58da7e55bf42ef1eddcd693a4e2c5b17
humanhash: nineteen-uranus-mike-stream
File name:jew.m68k
Download: download sample
Signature Mirai
File size:61'432 bytes
First seen:2024-12-17 21:21:13 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:neT+6JhUvtNaEVG1xPgj2x9+iGCvYN1ul8yXLyCIlqXxXv2XWFoN:nInQvtNFG1xIjeWvNUl8yXx2qBvyNN
TLSH T168533D96B401AD3CFC5BEABD40165A19FA313B3016A30F5B9BA7FC839C321A6DD16D41
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
202
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug masquerade mirai
Result
Verdict:
MALICIOUS
Result
Threat name:
n/a
Detection:
malicious
Classification:
troj
Score:
60 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Uses known network protocols on non-standard ports
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1577051 Sample: jew.m68k.elf Startdate: 17/12/2024 Architecture: LINUX Score: 60 18 165.168.93.89 WISCNET1-ASUS United States 2->18 20 160.7.70.94 WEST-NET-WESTUS United States 2->20 22 98 other IPs or domains 2->22 24 Antivirus / Scanner detection for submitted sample 2->24 26 Multi AV Scanner detection for submitted file 2->26 28 Uses known network protocols on non-standard ports 2->28 8 jew.m68k.elf 2->8         started        signatures3 process4 process5 10 jew.m68k.elf 8->10         started        12 jew.m68k.elf 8->12         started        process6 14 jew.m68k.elf 10->14         started        16 jew.m68k.elf 10->16         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2024-12-17 21:22:05 UTC
File Type:
ELF32 Big (Exe)
AV detection:
16 of 24 (66.67%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:kurc linux
Verdict:
Malicious
Tags:
Unix.Trojan.Mirai-6981989-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 51e5263b4aa537ed9b4c2f3b62fb4cfe0f4982508ed1a3e2fd0a2eda4625fd48

(this sample)

  
Delivery method
Distributed via web download

Comments