MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 757384290ed7f4b4604978cd6d2906c71f7cd0e19e92dfd230263662359bc0bf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments

SHA256 hash: 757384290ed7f4b4604978cd6d2906c71f7cd0e19e92dfd230263662359bc0bf
SHA3-384 hash: 07263dd0cc4858e64a2eb3cc6aae0d9b3e9c50c8f1423c5e980c9fbf07fb65bfeea547341b14d7e6a731b6ff0551679e
SHA1 hash: 17206a95d98e6a3f2898544f961e38adda9b0f99
MD5 hash: 0a99c208e6aafa0e2c9314c78646478b
humanhash: delta-bluebird-georgia-moon
File name:v
Download: download sample
Signature Mirai
File size:2'470 bytes
First seen:2024-12-26 17:01:19 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 48:4k5CEA00XZoEkAmjJkAm1nkAmw6kAmntkAma4kAmiQkAm+8kAm9/kAmPlkAmiQkE:tCEA00Wntjat1ktwptn2taTtirt+ft9f
TLSH T17E5133DF01686CB21E8089AD36D70D14748D89DB1DCAC64EA84E4D76F4CC94C73A2FAB
Magika txt
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://5.230.228.134/vv/mipscb1c2397a2408979b855b6269b0e545e137d54096ed46ff0ca6b0d91e24bbf52 Miraielf gafgyt mirai
http://5.230.228.134/vv/mipsel86ba81725dc4638d6ef969cbfe5ccdf1718f19a636aa60037a456450c7b6ca34 Miraielf gafgyt mirai
http://5.230.228.134/vv/armv4l2a514e0ab8e84db630747fe9d38e72063d3f7ffe5f9076c73a3f9ff52eb2d6bf Miraielf gafgyt mirai
http://5.230.228.134/vv/armv5l3d73a5656daaa94feb4ae135f78cfc6341e1de9cc730b28f8fbf91fd315a484d Miraielf gafgyt mirai
http://5.230.228.134/vv/armv6la7bb217aa33c852b9dcc54067ebe57db77930cddc0d7342d84477bebe2017da2 Miraielf gafgyt mirai
http://5.230.228.134/vv/armv7l7da3d4805795ca85be0e764d732cead98cd68b6a4ebde6b42cc56bb81979eb20 Miraielf gafgyt mirai
http://5.230.228.134/vv/sh48e8c5bbb9dc1ca65f0cce393493c48d15d4ef471be58178d58d8b06a1b7bb670 Gafgytelf gafgyt
http://5.230.228.134/vv/sparc2f3d65e0e55d1973ef61bb8ae6594cb438eb2191e88e48398f2b8aa6b68965f7 Miraielf gafgyt mirai
http://5.230.228.134/vv/riscv327f517eab4da6fde36b55b5f24e2e3841580315b1d1ff17ac37d9296524677b5c Miraielf gafgyt mirai
http://5.230.228.134/vv/powerpc084b71368b5b1a31b9e7edb7da480b903188c32a3c431b7607d379c9d34cf0e4 Miraielf gafgyt mirai
http://5.230.228.134/vv/armv4eb15d8ea986f3cd94808a685c86a4e6666568d805e4134c6973a06fe6f96cdd8e1 Miraielf gafgyt mirai
http://5.230.228.134/vv/arcf515ddd51f06d6ebfc8ae204a8c47446b9280b911d20a2aa6104ba065b4363e6 Miraielf gafgyt mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
86
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Malicious
Score:
99.9%
Tags:
mirai agent virus hype
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Result
Verdict:
MALICIOUS
Threat name:
Script-Shell.Trojan.MiraiA
Status:
Malicious
First seen:
2024-12-26 17:47:31 UTC
File Type:
Text (Shell)
AV detection:
7 of 38 (18.42%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

sh 757384290ed7f4b4604978cd6d2906c71f7cd0e19e92dfd230263662359bc0bf

(this sample)

  
Delivery method
Distributed via web download

Comments