MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6644c37fb3d3b10d383471e945c17b362b8980fb62ac122fc124a30f3b9ec3ca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6644c37fb3d3b10d383471e945c17b362b8980fb62ac122fc124a30f3b9ec3ca
SHA3-384 hash:	b77907f42ee1a096d8a54f18fe8e6e5cd789965d6d67a25e87db4be7cde48a8d21f7ef5c541d27737de2b63d8ac314ae
SHA1 hash:	a17e9e8a8f71910c9a00a267e157a18f9d63b9a4
MD5 hash:	6fabb85e9abf455e5f36b536b3af0af1
humanhash:	fanta-high-colorado-uncle
File name:	dlr.spc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	42'520 bytes
First seen:	2025-01-16 04:51:24 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	384:v+hy/FU+pu3wroA0tOypV4oWQTpzfwS6iqgrCnRSqdqtLgYHvO0G2hTtV2SJ5JeD:WI/O+Ywrx0tPVZD/f5hPOJ21t/zIL
TLSH	T190133A36BA620C2BC5D4957A61E30335F2F6834A24BC8B163EA10E5DBF74A0132577E9
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

151

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.ELF.Mirai-DH.12870.12780.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=678890774487910100df76e2linux22vpnfull_triage

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug lolbin masquerade remote

Link:

https://www.filescan.io/uploads/67889083a8210c4ace64b12e/reports/b7a90645-182e-4de5-85fe-0b4512cb492d/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/b33f8750-e01d-4f45-9d3f-1e7286e9ddb1

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1592427

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/6644c37fb3d3b10d383471e945c17b362b8980fb62ac122fc124a30f3b9ec3ca

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/6644c37fb3d3b10d383471e945c17b362b8980fb62ac122fc124a30f3b9ec3ca/

ReversingLabs TitaniumCloud Linux.Trojan.MiraiDownload

Threat name:

Linux.Trojan.MiraiDownload

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-16 04:52:04 UTC

File Type:

ELF32 Big (Exe)

AV detection:

11 of 38 (28.95%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mzcmg75t2oyq2obuohuulql3gyvytah3mkwbel6besrq6o46ypfa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250116-fhdkkaspbz/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/1c17ad39-e88d-44f6-8b0e-4188fdeed70b

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6644c37fb3d3b10d383471e945c17b362b8980fb62ac122fc124a30f3b9ec3ca