MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a8d4bb9ec84e3cfe30d77780b6e885940486e2c92bcf23bf7f67d93d610725e5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: a8d4bb9ec84e3cfe30d77780b6e885940486e2c92bcf23bf7f67d93d610725e5
SHA3-384 hash: 8a894cf04a050712cbc26b8ec4b2de6ebba17a06870279ac33890fc6343c82b906b5914a77d8b6b7a643d32074c8772a
SHA1 hash: 81de15eb49e2f5b241df7708c9c4539554120f3a
MD5 hash: db116c395659a6da8734b77472d8deaa
humanhash: butter-hotel-speaker-harry
File name:j
Download: download sample
Signature Mirai
File size:290 bytes
First seen:2025-01-04 20:16:50 UTC
Last seen:Never
File type: sh
MIME type:text/plain
ssdeep 6:5DCX6wcEE2X6wL3bdX6wrYCrX6wPY4WqUI45gZOexQX5J:5ABcEEwBL35BzDBPYNqYQ7xCX
TLSH T1BFD0ECCA79984E6000C75A8492E31AA9D48F819A32F0872DCF5709A65DD3A05F458DD2
Magika shell
Reporter abuse_ch
Tags:gafgyt mirai sh
URLMalware sample (SHA256 hash)SignatureTags
http://185.157.247.12/.a/busyboxn/an/aelf
http://185.157.247.12/.a/stracen/an/aelf
http://185.157.247.12/.a/socat947d94994555662758c6ad57ec25672e40ce688e135e9b81090d1d58b34392b2 Miraielf mirai
http://185.157.247.12/.a/gdbn/an/aelf

Intelligence


File Origin
# of uploads :
1
# of downloads :
138
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Result
Verdict:
UNKNOWN
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

sh a8d4bb9ec84e3cfe30d77780b6e885940486e2c92bcf23bf7f67d93d610725e5

(this sample)

8fceda57d83418bb288de0aef3c6df5e9421344ed0515c90fa5206f15c50f7e4

  
Delivery method
Distributed via web download
  
Dropping
MD5 e24d678d9c18c7811e16f4755dfd1e19
  
Dropping
SHA256 8fceda57d83418bb288de0aef3c6df5e9421344ed0515c90fa5206f15c50f7e4

Comments