MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c
SHA3-384 hash: 4348daf0f0b556f3369fcb604b882b04462f35fc4a191e0a7f687419d8597971d16b9cf86e0e0de2f329a7d4b1e410e7
SHA1 hash: d35d8fc24b6ac2f2bda64f1722ff28e7c04eaccd
MD5 hash: 58f280d4a35b6207d23e528e3a737be7
humanhash: ohio-iowa-island-tango
File name:heetz.arm5
Download: download sample
Signature Mirai
Create hunting rule
File size:25'304 bytes
First seen:2022-04-11 11:00:07 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 384:g0rJ65uKgyC2I9f/u30+40gmALuv3byV0XTrb/047tVX0X5aLhsmdGU57DnoslOg:PrJsgyMwymAiTDrb3xVMgNs3UBoslJ
TLSH T1AEB2D0B48B086456CE5025B2D5D9CA1325562EFCD27BE0BBB729097CF8F025258BC6C6
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
1
# of downloads :
174
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Unix.Trojan.Gafgyt-7641309-0
Create hunting rule

Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/62540a7304b81dabe27fa686/reports/967627cf-9ff5-408c-99e2-7a3c5078df2e/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
192.210.132.120/heetzcase
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
MALICIOUS
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/a4a49130-2fe5-4386-b11f-c89623478bbd
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/974500
Signature
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Behaviour
Behavior Graph:
Download SVG
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2022-04-11 11:01:05 UTC
File Type:
ELF32 Little (Exe)
AV detection:
14 of 26 (53.85%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/220411-m4jf9sdhgl/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.23
Link:
https://yomi.yoroi.company/submissions/b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf b6892046ea17c3c5188c4cbd832b14bfcdd239e2fd15652e39c7adcf5559256c

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2141207/
  
Delivery method
Distributed via web download

Comments