MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a2a197818cf2387d56f616c02fdbd86c3c76aa3f086e4c64a821f0440ef8142d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a2a197818cf2387d56f616c02fdbd86c3c76aa3f086e4c64a821f0440ef8142d
SHA3-384 hash: 731494081d464b0f687303f9a68c2160b8a1112eacc356b8503dc25273a24a2799e4348ab2e7dc23f932ad270152a163
SHA1 hash: 4bb86ed2f7a02db47acdebca3b56199253520d85
MD5 hash: 8df839e44d2f829d8e803bf2f6ec050f
humanhash: cup-early-monkey-west
File name:KKveTTgaAAsecNNaaaa.arm6
Download: download sample
Signature Mirai
Create hunting rule
File size:80'548 bytes
First seen:2021-02-07 04:14:27 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 1536:CynR7o8Mhxi+ZYjieuKskaPMA74J70qNdSdFrwzDIhiFaMHmC6:l7oRS+Z+i2FIIYqN8UaMHmC
TLSH B0731A86BC809A10C6C51777FA2F218D33075799F2DE7352CE155FB07B8B81B0E2A65A
telfhash e4212eea8bc01b8c87e5901cde9d51526ab43dbe6f17329b831cf14f5052586712d427
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
1
# of downloads :
183
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.Mirai-7135937-0
Create hunting rule

Unix.Dropper.Mirai-7136014-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/a2a197818cf2387d56f616c02fdbd86c3c76aa3f086e4c64a821f0440ef8142d/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2020-11-25 03:10:29 UTC
AV detection:
25 of 47 (53.19%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/210207-va3kepj5vs/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.20
Link:
https://yomi.yoroi.company/submissions/a2a197818cf2387d56f616c02fdbd86c3c76aa3f086e4c64a821f0440ef8142d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf a2a197818cf2387d56f616c02fdbd86c3c76aa3f086e4c64a821f0440ef8142d

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/847417/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/993190/

Comments