MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2
SHA3-384 hash: 85ba6f8bfe2b7c20cde1dae507ab256215f0ce69c7906f7ca57bba8027f2c99a293ed28a2b89be93934d1053b41ef510
SHA1 hash: 995ffd373b05726e49b37b6c1b0159682325138a
MD5 hash: 3e30c3dbbf83eb13c95ebb9c82ef8e38
humanhash: dakota-louisiana-mango-blue
File name:irc.arm5-20220629-0354
Download: download sample
Signature Mirai
Create hunting rule
File size:18'916 bytes
First seen:2022-06-29 03:54:32 UTC
Last seen:2022-06-30 12:57:48 UTC
File type: elf
MIME type:application/x-executable
ssdeep 384:8wkLctwY+8FpzYtwNuVTc2ELdZ5Rf2Th1O+TUdWQhymdGUop5ht+0:8w+ctp9PdZ5R+h1OAUdWQs3UozL5
TLSH T1CC82AF79519F98F0CAA00878EABEC203774387B4D4F634AB27188760ABD090F56FD557
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
15
# of downloads :
152
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/62bbcd5bfb0f8ab80894b06a/reports/af3d20ac-69a9-4946-9694-7d761a5a0195/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
62.197.136.92/shitnet
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/99e67fa8-d7df-4688-9809-ab19ffedad24
Result
Threat name:
Mirai
Create hunting rule
Detection:
malicious
Classification:
troj.evad
Score:
60 / 100
Link:
https://www.joesandbox.com/analysis/1021594
Signature
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Yara detected Mirai
Behaviour
Behavior Graph:
Download SVG
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2022-06-28 22:18:38 UTC
File Type:
ELF32 Little (Exe)
AV detection:
16 of 26 (61.54%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=v2wb2lhi6sxk5fiketjfnyqzxf7emyi4rbh7z7a7gjljxszxy3ba._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/220629-egr6wsgcc3/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf aeac1d2ce8f4aeae950a24d256e219b97e46611c884ffcfc1f32569bcb37c6c2

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2248817/
  
Delivery method
Distributed via web download

Comments