MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 841aecb3078491ed13bfe0d389938c491abd341f6ff56e4549e9e2a5df312621. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments 1

SHA256 hash: 841aecb3078491ed13bfe0d389938c491abd341f6ff56e4549e9e2a5df312621
SHA3-384 hash: 99f1b05718a0a43044b779f718ba995357be183ceb4a04d40bdb0b1f529f602c24db4f27b32edfbe74ec291026e8bb89
SHA1 hash: ca1a7e0ef85027a50b357630dbfc3aa37182fbc2
MD5 hash: 22816a10546be5a1c029f2d9ef2ce30e
humanhash: emma-equal-eleven-autumn
File name:22816a10546be5a1c029f2d9ef2ce30e
Download: download sample
Signature Mirai
File size:26'224 bytes
First seen:2022-01-10 12:37:19 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:taD3MLQFKKeSNOZD+p1iHNLj2G4uVcqgw0RNWX3:t6q+KKesU+p1iH9jj4u+qgw0bWX3
TLSH T1E0C2D0B0E3D4FC51F66E9AB56C5492C42FF08DE936B1EAD122106F1CF6821769606CDC
Reporter zbetcheckin
Tags:32 elf mirai powerpc

Intelligence


File Origin
# of uploads :
1
# of downloads :
229
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Result
Verdict:
MALICIOUS
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
52 / 100
Signature
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2022-01-10 12:38:08 UTC
File Type:
ELF32 Big (Exe)
AV detection:
14 of 28 (50.00%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 841aecb3078491ed13bfe0d389938c491abd341f6ff56e4549e9e2a5df312621

(this sample)

  
Delivery method
Distributed via web download

Comments



Avatar
zbet commented on 2022-01-10 12:37:20 UTC

url : hxxp://95.181.161.60/bins/yakuza.ppc