MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5585626d556664314cc620db3abda437bc00c32e603357f07bb2f10a3f24a412. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5585626d556664314cc620db3abda437bc00c32e603357f07bb2f10a3f24a412
SHA3-384 hash:	3cd851f4834fa9b762372a33408144296ffc5a5a0f2460d4fbbddb8fea61d1a1558c0c31db93572bb74eb078e38458f0
SHA1 hash:	daa1d667211dd32468f007b3d325a9ee0a8e3db9
MD5 hash:	47aeab08ed65210dcc8ec69eb0b58b92
humanhash:	river-ink-orange-november
File name:	m68k
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	23'632 bytes
First seen:	2024-12-14 07:56:51 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:pSVIPHT1pWaa4ba6asR5idK9KC2SPE26bOFITvxc+ul8HAEPLVf:pp6coSbzd8BZf
TLSH	T173B219D3F118EC7DF85EF67D8C019614B2B0B621C9921771A37BB86BDBB61800476D41
Magika	elf
Reporter	abuse_ch
Tags:	elf gafgyt mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

156

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Trojan.Mirai-6981989-0

Alert

Create hunting rule

Unix.Trojan.Mirai-7732430-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9940650-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10018298-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=675d3c9e8fb73f13afc54394linux22vpnfull_triage

Tags:

malware

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug

Link:

https://www.filescan.io/uploads/675d3a4e7c7553767c3f07ba/reports/d3262f8f-eab2-4468-912b-a10d0ed60bd9/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/f2867556-e02c-45f6-8e0f-dfa2d2ac1e7c

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1575057

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/5585626d556664314cc620db3abda437bc00c32e603357f07bb2f10a3f24a412

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5585626d556664314cc620db3abda437bc00c32e603357f07bb2f10a3f24a412/

ReversingLabs TitaniumCloud Linux.Trojan.Mirai

Threat name:

Linux.Trojan.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-14 07:57:03 UTC

File Type:

ELF32 Big (Exe)

AV detection:

14 of 24 (58.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kwcwe3kvmzsdctggedntvpneg66abqzomazvp4d3wlyqupzeuqja._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/241214-js9yasxpej/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-6981989-0

YARA:

n/a

Link:

https://app.threat.zone/submission/4230f8c1-548f-45d3-b28c-0d5a0e7d9f8b

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/5585626d556664314cc620db3abda437bc00c32e603357f07bb2f10a3f24a412