MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 948c783a9f50a91db6f04cc545d5f50ec04e1356626f8d233d5b5b86a07b243e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	948c783a9f50a91db6f04cc545d5f50ec04e1356626f8d233d5b5b86a07b243e
SHA3-384 hash:	cf1dc9997d523b8089f2237e783308d7c08b385ee1871e68f66ac7fbc39251cb319a6c59332087e98cc974de542b3411
SHA1 hash:	fad35c2b3ac578d765fa7a9e8e1601dd0a3f046a
MD5 hash:	5b3f852c98dc8d82a95c3c04b4d9befd
humanhash:	carolina-one-item-lion
File name:	jew.ppc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	71'176 bytes
First seen:	2024-12-11 23:16:06 UTC
Last seen:	2024-12-12 09:40:55 UTC
File type:	elf
MIME type:	application/x-executable
ssdeep	1536:EGfWJcRyNYctiv1da2PHS3g4JQsA42THmd42+I:VfNyNNivXQZ
TLSH	T147632B023324095BE9E25EB0263F1BE183BEED4216F0724A694FEF654636E721446FDD
TrID	50.1% (.) ELF Executable and Linkable format (Linux) (4022/12) 49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

126

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135939-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7136025-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9964459-0

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=675a1f04bb885d3ad89132e0linux22vpnfull_triage

Tags:

mirai

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Runs as daemon

Connection attempt

Receives data from a server

Opens a port

Sends data to a server

Substitutes an application name

Performs a bruteforce attack in the network

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug masquerade

Link:

https://www.filescan.io/uploads/675a1d6ff4b6d25bec606f5e/reports/47edee83-94f7-4a73-b884-fe698912b203/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/c4f08ff3-ea49-48e7-8a02-bac1c9cbbd0e

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1573435

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/948c783a9f50a91db6f04cc545d5f50ec04e1356626f8d233d5b5b86a07b243e

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/948c783a9f50a91db6f04cc545d5f50ec04e1356626f8d233d5b5b86a07b243e/

ReversingLabs TitaniumCloud Linux.Trojan.Mirai

Threat name:

Linux.Trojan.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-11 23:17:06 UTC

File Type:

ELF32 Big (Exe)

AV detection:

17 of 24 (70.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ssghqou7kcur3nxqjtculvpvb3ae4e2wmjxy2iz5lnnynid3eq7a._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:kurc linux

Link:

https://tria.ge/reports/241211-3a6mpswqcj/

Threat.Zone Malicious

Verdict:

Malicious

Tags:

Unix.Dropper.Mirai-7135870-0

YARA:

n/a

Link:

https://app.threat.zone/submission/acc36592-8ca7-48de-86e8-0a1ee60c2088

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Mirai

Threat name:

Mirai

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/948c783a9f50a91db6f04cc545d5f50ec04e1356626f8d233d5b5b86a07b243e