MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 724648c63ee766e99f7de7ee64dae328de87fe4a313a21ed01e8ea82f1916c3b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	724648c63ee766e99f7de7ee64dae328de87fe4a313a21ed01e8ea82f1916c3b
SHA3-384 hash:	49134aa0f1dce5611075bb6631c4ed20e354bd00af5ffd34a72c31b8168d3a086dc22b65d19cca13b093c00a5f0e3506
SHA1 hash:	c649e6328480b00f8f05e2baacf89560fd0fe00a
MD5 hash:	450ec95b944d843628740bc389276a15
humanhash:	vermont-north-colorado-queen
File name:	main.m68k
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	150'048 bytes
First seen:	2025-01-04 13:26:45 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	3072:FyF0/siAW1f7mccVfAQZVGONHV7jbiBLrZvyN79o4:FyF4ficcVIQqONoL5yNBo4
TLSH	T1E0E319C7F800DEBAF80AE33748174909B530BBE105925B372267797BED3A1991563EC6
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

145

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.28940.LC.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.29325.LC.Pl.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Mirai-81.UNOFFICIAL

Alert

Create hunting rule

Unix.Trojan.Mirai-6981989-0

Alert

Create hunting rule

Unix.Trojan.Gafgyt-7782058-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9441505-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9940650-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10011027-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10011918-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10012509-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10017111-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10018298-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6779384074a2bd296e2698a4linux22vpnfull_triage

Tags:

malware

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

anti-debug bash lolbin masquerade remote

Link:

https://www.filescan.io/uploads/67793731ff386d894907747b/reports/19217b07-c415-4bd6-ae51-8b4f27284d77/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/963784ec-d0bf-42c5-a390-48523760ecc5

Joe Sandbox Mirai

Result

Threat name:

Mirai

Alert

Create hunting rule

Detection:

malicious

Classification:

troj.evad

Score:

76 / 100

Link:

https://www.joesandbox.com/analysis/1584163

Signature

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Sample deletes itself

Yara detected Mirai

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/724648c63ee766e99f7de7ee64dae328de87fe4a313a21ed01e8ea82f1916c3b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/724648c63ee766e99f7de7ee64dae328de87fe4a313a21ed01e8ea82f1916c3b/

ReversingLabs TitaniumCloud Linux.Backdoor.Mirai

Threat name:

Linux.Backdoor.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-04 13:27:10 UTC

File Type:

ELF32 Big (Exe)

AV detection:

16 of 23 (69.57%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ojderrr645toth3547xgjwxdfdpip7skge5cd3ib5dvif4mrnq5q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250104-qp34xatmbm/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

trojan gafgyt Unix.Trojan.Mirai-6981989-0

YARA:

Linux_Trojan_Gafgyt_28a2fe0c Linux_Trojan_Gafgyt_ea92cca8 Linux_Gafgyt_May_2024

Link:

https://app.threat.zone/submission/cbf8f4b9-23c8-4e7a-a49e-9a100933cb16

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/724648c63ee766e99f7de7ee64dae328de87fe4a313a21ed01e8ea82f1916c3b