MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments 1
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed
SHA3-384 hash: d7bd2a8846e31a82831a3533a69df752584965871742352fee0bfa753889a2df485436f3566de9ab5c86b93585d199cb
SHA1 hash: 28c58fd3594b67e35ca4fac4c1843b8e812fb366
MD5 hash: 652182fda432b31a1ee585881125c745
humanhash: quebec-sweet-echo-oklahoma
File name:652182fda432b31a1ee585881125c745
Download: download sample
Signature Mirai
Create hunting rule
File size:27'304 bytes
First seen:2021-07-10 08:45:33 UTC
Last seen:2021-07-10 11:36:38 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:+B9XI7K9W0ECA2CcsRkATCMD2M3FEoApWC:+B9Y7KAzeCcsGATC8VEoAt
TLSH T1C7C2D159D6EC7DDACD8D2AFDA1EE152D0E0721853B4F8B4D23225C1C662EB85B18C87C
Reporter zbetcheckin
Tags:32 elf mips mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
278
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Linux.Mirai.53.27436.14413.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
UPX
Botnet:
unknown
Number of open files:
7
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/331d6247-4534-4865-a2f4-f86feaa18c47
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2021-07-10 08:41:25 UTC
AV detection:
10 of 45 (22.22%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/210710-kps6m4b8dj/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.20
Link:
https://yomi.yoroi.company/submissions/6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 6855faaa8c6d467fd8c88e9c252dab765427d13399d23edde62e8e0acf2fe2ed

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/1440777/

Comments


Avatar
zbet commented on 2021-07-10 08:45:35 UTC

url : hxxp://5.181.80.12/bins/sora.mpsl