MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c
SHA3-384 hash: b637802e372ed7ff5493703f7da00e47cdbd78482db285767fe61207ffa51c6648fa46f6421392eee983a0d707b72c68
SHA1 hash: 76f142636a5857f39b72a1b0062b159faf6b6000
MD5 hash: fcedb06be1240644cf7392ae83600442
humanhash: louisiana-salami-west-tennessee
File name:Cronarm
Download: download sample
Signature Mirai
Create hunting rule
File size:24'076 bytes
First seen:2022-03-21 14:50:06 UTC
Last seen:2022-03-21 17:00:07 UTC
File type: elf
MIME type:application/x-executable
ssdeep 384:Xve61ETeimlczawZcdgCLGh/T/zEYJjVEQjtuJHhk7ZXwmdGU5EW:F1aPmOzplOGh/TLxxESuJyS3UV
TLSH T1E2B2D17182CAF1B7D9B04836C51AC381735482BDE30BA5B93794437C99C20AB29FDD9B
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
156
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.Mirai-9894781-0
Create hunting rule

Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/623890a70cd58dbd92cf51bb/reports/dcfb06e6-b5e2-4600-8104-46e9541957b1/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
103.136.42.135:80
Number of open files:
2
Number of processes launched:
5
Processes remaning?
true
Remote TCP ports scanned:
2323,23
Full report:
https://elfdigest.com/brief/91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c
Behaviour
Process Renaming
Botnet C2s
TCP botnet C2(s):
103.136.42.135:5034
UDP botnet C2(s):
not identified
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/ea8a3f48-8ba7-4306-b915-ddb79193c191
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/960869
Signature
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Behaviour
Behavior Graph:
Download SVG
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2022-03-21 14:50:17 UTC
File Type:
ELF32 Little (Exe)
AV detection:
16 of 27 (59.26%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/220321-r7m13sdccq/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.23
Link:
https://yomi.yoroi.company/submissions/91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 91662febbee42034fc89dedf7c799a549b078451c423025e4bfaa475438a6e1c

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2102321/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/2109611/

Comments