MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6c99b723928fd60d563cedce24e16c3fec67cdf17244e7c2351e6d282f33b524. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Mirai

Vendor detections: 10

Intelligence 10 IOCs YARA 1 File information Comments

SHA256 hash:	6c99b723928fd60d563cedce24e16c3fec67cdf17244e7c2351e6d282f33b524
SHA3-384 hash:	4256780e38bb5a1a2bfb783c6bf684b8c09df1d107ca90aa206087e08fd57e9644e890aceeb1b35ca36a932c1befc79e
SHA1 hash:	52f3068b98d3d9d3a662b878201ec3e00c54e7e6
MD5 hash:	71bad241173fb0fc186725f6b97a79e0
humanhash:	oregon-three-one-twenty
File name:	jklspc
Download:	download sample
Signature	Mirai Create hunting rule
File size:	59'600 bytes
First seen:	2025-03-04 02:32:40 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:eQsKdS726YbmnKHlfA/ZeVJQm1BhkZCaB:e9r5auRUCzB
TLSH	T1C0434B21B93A2E17C4D4A8BB22F30324B2F6270D25A8CB1D7D721F8EFF2564056576B5
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

File Origin

# of uploads :

# of downloads :

105

Origin country :

Vendor Threat Intelligence

Detection(s):

Unix.Trojan.Mirai-9970440-0

Unix.Trojan.Mirai-1

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67c6670fc8d04e92a4becd43linux22vpnfull_triage

Tags:

mirai

Verdict:

Unknown

Threat level:

0/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67c6667fe95d0f9029e354bf/reports/f46bcfd6-ecd7-4eef-879d-695ab20961bc/overview

Result

Verdict:

UNKNOWN

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/c731d15a-0140-4ca4-927c-b309de436798

Result

Threat name:

n/a

Detection:

malicious

Classification:

troj

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1628721

Signature

Multi AV Scanner detection for submitted file

Sends malformed DNS queries

Behaviour

Behavior Graph:

Download SVG

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/6c99b723928fd60d563cedce24e16c3fec67cdf17244e7c2351e6d282f33b524

Detection:

mirai

Link:

https://mwdb.cert.pl/sample/6c99b723928fd60d563cedce24e16c3fec67cdf17244e7c2351e6d282f33b524/

Threat name:

Linux.Backdoor.Mirai

Status:

Malicious

First seen:

2025-03-04 02:33:33 UTC

File Type:

ELF32 Big (Exe)

AV detection:

22 of 38 (57.89%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nsm3oi4sr7la2vr45xhcjylmh7wgptprojcopqrvdzwsqlztwusa._file

Result

Malware family:

mirai

Score:

10/10

Tags:

family:mirai botnet:botnet linux

Link:

https://tria.ge/reports/250304-c15vzsxl16/

Verdict:

Malicious

Tags:

Unix.Trojan.Mirai-9970440-0

YARA:

n/a

Link:

https://app.threat.zone/submission/047ee19d-938c-49c9-95a2-d5f6c63ea23a

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/6c99b723928fd60d563cedce24e16c3fec67cdf17244e7c2351e6d282f33b524

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.