MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a8d4bb9ec84e3cfe30d77780b6e885940486e2c92bcf23bf7f67d93d610725e5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Mirai
Vendor detections: 5
| SHA256 hash: | a8d4bb9ec84e3cfe30d77780b6e885940486e2c92bcf23bf7f67d93d610725e5 |
|---|---|
| SHA3-384 hash: | 8a894cf04a050712cbc26b8ec4b2de6ebba17a06870279ac33890fc6343c82b906b5914a77d8b6b7a643d32074c8772a |
| SHA1 hash: | 81de15eb49e2f5b241df7708c9c4539554120f3a |
| MD5 hash: | db116c395659a6da8734b77472d8deaa |
| humanhash: | butter-hotel-speaker-harry |
| File name: | j |
| Download: | download sample |
| Signature | Mirai |
| File size: | 290 bytes |
| First seen: | 2025-01-04 20:16:50 UTC |
| Last seen: | Never |
| File type: | sh |
| MIME type: | text/plain |
| ssdeep | 6:5DCX6wcEE2X6wL3bdX6wrYCrX6wPY4WqUI45gZOexQX5J:5ABcEEwBL35BzDBPYNqYQ7xCX |
| TLSH | T1BFD0ECCA79984E6000C75A8492E31AA9D48F819A32F0872DCF5709A65DD3A05F458DD2 |
| Magika | shell |
| Reporter | |
| Tags: | gafgyt mirai sh |
Shell script dropper
This file seems to be a shell script dropper, using wget, ftpget and/or curl. More information about the corresponding payload URLs are shown below.
| URL | Malware sample (SHA256 hash) | Signature | Tags |
|---|---|---|---|
| http://185.157.247.12/.a/busybox | n/a | n/a | elf |
| http://185.157.247.12/.a/strace | n/a | n/a | elf |
| http://185.157.247.12/.a/socat | 947d94994555662758c6ad57ec25672e40ce688e135e9b81090d1d58b34392b2 | Mirai | elf mirai |
| http://185.157.247.12/.a/gdb | n/a | n/a | elf |
Intelligence
File Origin
# of uploads :
1
# of downloads :
138
Origin country :
DEVendor Threat Intelligence
Detection(s):
Verdict:
Malicious
Score:
91.7%
Link:
Tags:
gafgyt
Verdict:
Likely Malicious
Threat level:
7.5/10
Confidence:
100%
Tags:
anti-debug
Result
Verdict:
UNKNOWN
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
8fceda57d83418bb288de0aef3c6df5e9421344ed0515c90fa5206f15c50f7e4
Delivery method
Distributed via web download
Dropping
MD5 e24d678d9c18c7811e16f4755dfd1e19
Dropping
SHA256 8fceda57d83418bb288de0aef3c6df5e9421344ed0515c90fa5206f15c50f7e4
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.