MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1
SHA3-384 hash: cef7dd589376ad6cbd12cb879e8b14219fea75f47d6c3610fc5ad042a1a4988e7c48fc7f86a786b97066d22a71c6e6bc
SHA1 hash: ddb2021e6c44c4eadbed7bc097a901738d816f1d
MD5 hash: 1b3a19089faa7cb1a5f8b699b5157ccb
humanhash: avocado-asparagus-spaghetti-island
File name:yakuza.arm
Download: download sample
Signature Mirai
Create hunting rule
File size:26'036 bytes
First seen:2022-01-03 08:00:06 UTC
Last seen:2022-01-10 04:00:06 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:kg/kIo2CzmYv2NdUZ2u7EHXWG4w5OVg2r3UZ:h/kIo2lYONdUZ2u7EHR4pC
TLSH T1ADC2D060838D19B2D0F10C73CAF64E4B23AF4770696A12661B7908FCA95A0D142FDDEF
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
171
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.Mirai-9894781-0
Create hunting rule

Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/61d2ad0fec6c6c14a906eba7/reports/64f92554-374f-4a0a-a36a-b6d6b752f62e/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
185.204.217.174:80/bins
Number of open files:
2
Number of processes launched:
4
Processes remaning?
true
Remote TCP ports scanned:
37215
Full report:
https://elfdigest.com/brief/85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1
Behaviour
Process Renaming
Botnet C2s
TCP botnet C2(s):
185.204.217.174:5034
UDP botnet C2(s):
not identified
Result
Verdict:
MALICIOUS
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/2b42a4e5-3871-408c-b793-db2e08c9b011
Result
Threat name:
Unknown
Detection:
suspicious
Classification:
evad
Score:
21 / 100
Link:
https://www.joesandbox.com/analysis/914779
Signature
Sample is packed with UPX
Behaviour
Behavior Graph:
Download SVG
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2022-01-03 08:01:07 UTC
File Type:
ELF32 Little (Exe)
AV detection:
15 of 28 (53.57%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/220103-jv3a8shedk/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.38
Link:
https://yomi.yoroi.company/submissions/85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 85e090097eb9063256847bf5e4354ccabbff8f46ff2021a3c70d3f7b6ea1e7c1

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/1945592/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/1946745/

Comments