MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071
SHA3-384 hash:	bf7c76e9f790e9952e18f4713917dba71b5de683686cc2f719487104d467c5193917ea90d68882e3334c383ef156a8fa
SHA1 hash:	5c6a0f602ee6de237c3162f9130491053d995990
MD5 hash:	9dec0c079dc61ce2055d11306b7d7ba6
humanhash:	stairway-lactose-alanine-xray
File name:	dlr.sh4
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'204 bytes
First seen:	2025-03-01 11:22:42 UTC
Last seen:	2025-03-01 13:02:57 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	24:w5olnAwdGtSnUpzzbBWpzms+1r5gDpum17zGokC7m17lRONfi:w5olnPdxnUpzzbBWpzms+UDpum17So7u
TLSH	T13521355AA4885D64DF29D73C4A7147537B05C928C10FE3CE4D1A46F6582B28C6A941D5
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

87

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.DownLoader.534.10299.3821.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c2efde4e50050b2e6f4b90linux22vpnfull_triage

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/67c2ee3ee95d0f9029e205fb/reports/589beed7-a525-4808-835e-c42e010141b7/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/d540e986-d3a4-4f6d-9ee1-acb56dbcd40a

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1627026

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071/

ReversingLabs TitaniumCloud Linux.Downloader.Mirai

Threat name:

Linux.Downloader.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-01 11:23:39 UTC

File Type:

ELF32 Little (Exe)

AV detection:

15 of 24 (62.50%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=me3ekzp2iknyo7xt257x5746jzlh23ux2uq2bbaof2cricisebyq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250301-nhcx2azp19/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/28d34902-2104-4e59-9573-f354fdba7afe

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/61364565fa429b877ef3d77f7eff9e4e567d6e97d521a0840e2e851409122071