MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b2aa076b43bb3369b6af3e884896679009dd91222f4c29f28426fdedc46d2bde. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

@Libranalysis

A detailed analysis of this Corona DDoS bot can be found here: https://maxkersten.nl/binary-analysis-course/malware-analysis/corona-ddos-bot/

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

365

Origin country :

NL

Mail intelligence

No data

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7138848-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7139229-0

Alert

Create hunting rule

Unix.Trojan.Mirai-7640640-0

Alert

Create hunting rule

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Linux.Trojan.Gafgyt

Threat name:

Linux.Trojan.Gafgyt

Alert

Create hunting rule

Status:

Malicious

First seen:

2019-09-26 22:03:23 UTC

File Type:

ELF64 Little (Exe)

AV detection:

14 of 29 (48.28%)

Threat level:

  5/5

VirusTotal 60.34%

AV coverage:

60.34%

AV detections:

35 / 58

Link:

https://www.virustotal.com/file/b2aa076b43bb3369b6af3e884896679009dd91222f4c29f28426fdedc46d2bde/analysis/1584055071/

YOROI YOMI Legal

Threat name:

Legal

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b2aa076b43bb3369b6af3e884896679009dd91222f4c29f28426fdedc46d2bde