MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 59bb88f4f5b1ee54c1ccb59fe7d4dbcfd8ff1bad92e0377db884a458dfa4e000. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	59bb88f4f5b1ee54c1ccb59fe7d4dbcfd8ff1bad92e0377db884a458dfa4e000
SHA3-384 hash:	2172ec99588e6845a13fedf89fcbcfd779beeb9472700c127d0a1a6bdc1a2d90f7911760af767597b4fdb7b285ce2c6f
SHA1 hash:	51d589af64c696bfeaacae0047690c3aeb1422a0
MD5 hash:	d378c15352ca1929ce32f38e641aaacb
humanhash:	hydrogen-ack-oven-hawaii
File name:	dlr.ppc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	35'376 bytes
First seen:	2024-11-27 09:11:10 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:MlE8xwaq0FHvT+Qk+9F6Y5nq6v+tJOlIZn:Mlkaq0l/F6eq6mTOlcn
TLSH	T146F25E42B30C0943D1A77EF03B3B37E1D39EF69121E4EA44364EAA869172E315586EDD
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

115

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.ELF.Mirai-DH.29304.75.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6746e263b31374f0983507e7linux22vpnfull_triage

Tags:

malware

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug lolbin masquerade remote

Link:

https://www.filescan.io/uploads/6746e2624759c792deb63af3/reports/158fa4ec-19e6-4c25-a5da-3eb15eb584c2/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/9ffc11cf-541e-4490-966e-bd7f965b9a7d

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1563667

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/59bb88f4f5b1ee54c1ccb59fe7d4dbcfd8ff1bad92e0377db884a458dfa4e000

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/59bb88f4f5b1ee54c1ccb59fe7d4dbcfd8ff1bad92e0377db884a458dfa4e000/

ReversingLabs TitaniumCloud Linux.Trojan.ZkarletFlash

Threat name:

Linux.Trojan.ZkarletFlash

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-11-27 09:12:10 UTC

File Type:

ELF32 Big (Exe)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lg5yr5hvwhxfjqomwwp6pvg3z7mp6g5nslqdo7nyqssfrx5e4aaa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/241127-k56l3stneq/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/f2b68d72-3dc6-43ab-b9fe-747229006ebb

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/59bb88f4f5b1ee54c1ccb59fe7d4dbcfd8ff1bad92e0377db884a458dfa4e000