MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49
SHA3-384 hash: 12fd0770e1ad1c5462633aa20918b3b6fd35c6ec9fb18931842aeff8e7322e9b4fdf89e8162950fd202b45f9aae97146
SHA1 hash: aece2c940fcfc7d8519d7bf3f69fb006eace3253
MD5 hash: 149f4e1a22443be09802d5b123871c48
humanhash: mockingbird-delta-fifteen-asparagus
File name:mpsl
Download: download sample
Signature Mirai
Create hunting rule
File size:87'704 bytes
First seen:2025-02-19 15:46:39 UTC
Last seen:2025-02-20 14:45:10 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:MxLkbb+AWrNoN1oFwvVqVB818XzVwRHXGLB77gfLqgC:jPuOwF2qB78Dq
TLSH T1C3834A45EE504FBFC42ECF30865E43174598484A5BF2A21A677CC948F6AD2618FE3E9C
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence

File Origin
# of uploads :
3
# of downloads :
96
Origin country :
DE DE
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.ELF.Mirai-CVB.31527.334.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=67b5fdcda0fd713c335bc97clinux22vpnfull_triage
Tags:
n/a
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
gcc
Link:
https://www.filescan.io/uploads/67b5fd0d2b2cb326fc9fe863/reports/ff202f03-3c86-4cad-84b2-2fbbaa41d60c/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
mips
Packer:
not packed
Botnet:
unknown
Number of open files:
7
Number of processes launched:
1
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/b13523f9-7b98-4fb5-97df-a280f173e745
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
2 / 100
Link:
https://www.joesandbox.com/analysis/1619187
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2025-02-19 15:47:16 UTC
File Type:
ELF32 Little (Exe)
AV detection:
3 of 38 (7.89%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=vbrbbfvo3vh6ajuw3uplp7stlpsy4kztrtq2v5zk67srgizupzeq._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/250219-s8a9catphq/
Verdict:
Unknown
Tags:
n/a
YARA:
n/a
Link:
https://app.threat.zone/submission/98532549-436f-4131-b742-949325b50853
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Mirai
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf a8621096aedd4fe02696dd1eb7fe535be58e2b338ce1aaf72af7e51323347e49

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3414840/
  
Delivery method
Distributed via web download

BLint

The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.

Findings
IDTitleSeverity
CHECK_PIEMissing Position-Independent Executable (PIE) Protectionhigh

Comments