MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92fd44180683fb7c1940c77de7b604bcf9f22d298dac532aa34c7523c1078b84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 10


Intelligence 10 IOCs YARA File information Comments

SHA256 hash: 92fd44180683fb7c1940c77de7b604bcf9f22d298dac532aa34c7523c1078b84
SHA3-384 hash: 6042f727c8deb8f2f48eba263f529b488df4a8336695dd7a24396c25d1db199169dc3771a38c3b70f6d79062d81f942d
SHA1 hash: e2489d6c8b7e9de952f75f59f5843146a342e057
MD5 hash: a25d11fac905f84a16daeb4ead70a6b6
humanhash: delaware-artist-grey-kentucky
File name:SwiftSec.m68k
Download: download sample
Signature Mirai
File size:61'428 bytes
First seen:2024-12-08 16:10:57 UTC
Last seen:2024-12-09 09:01:26 UTC
File type: elf
MIME type:application/x-executable
ssdeep 768:Cez+KJpwvt5mSGesAb6C15uIS4N1ux8yXziCMlqXxmiPXq5Pt:CQvsvt51GLAb6SA4NUx8yXpqq4iPat
TLSH T124532D97B401AD3CFC5BEABD40121A19F9213A3065B30F2B9797FC939C322A65D1BD41
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
2
# of downloads :
114
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug masquerade mirai
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Antivirus / Scanner detection for submitted sample
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1570997 Sample: SwiftSec.m68k.elf Startdate: 08/12/2024 Architecture: LINUX Score: 48 14 109.202.202.202, 80 INIT7CH Switzerland 2->14 16 91.189.91.42, 443 CANONICAL-ASGB United Kingdom 2->16 18 2 other IPs or domains 2->18 20 Antivirus / Scanner detection for submitted sample 2->20 6 dash rm 2->6         started        8 dash cat 2->8         started        10 dash head 2->10         started        12 8 other processes 2->12 signatures3 process4
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2024-12-08 16:11:04 UTC
File Type:
ELF32 Big (Exe)
AV detection:
17 of 24 (70.83%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:kurc linux
Verdict:
Malicious
Tags:
Unix.Trojan.Mirai-6981989-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf 92fd44180683fb7c1940c77de7b604bcf9f22d298dac532aa34c7523c1078b84

(this sample)

  
Delivery method
Distributed via web download

Comments