MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf0163f36b3314fc30c294e9b7c33a9bbfa5d0cc6b907fb0952d517edc123a53. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	bf0163f36b3314fc30c294e9b7c33a9bbfa5d0cc6b907fb0952d517edc123a53
SHA3-384 hash:	653fee6dbbb5009f5fbd96f92c370b3c26eb344f51968f5f5433108acd6423bb32bc947a668a968ea29745ab319cf7f6
SHA1 hash:	735f3b922b206a341472536dfcaf5bb86910d5e2
MD5 hash:	5a3f76d78621df4008cf45f2a6243ecf
humanhash:	north-harry-delta-december
File name:	horizon.m68k
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	44'648 bytes
First seen:	2025-05-18 18:03:28 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:rFeBvhWU/7Vg+H2zKxoRWqUJa01oPYXp3eJOr7Pbz9lLXCHIpDLpBPariuQDurYY:RAhZVg2xoRWqUJa01oPYXp3eJOr7PbvI
TLSH	T15A131AA6BC00AD3DFC6FE6BE84570A09B530725544A30B2773B7FC939D321A85D2AD46
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

86

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Trojan.Mirai-6981989-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135906-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135966-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135967-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9935718-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9940650-0

Alert

Create hunting rule

Unix.Trojan.Mirai-10018298-0

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=682a2282e5aa44ec2e1a90ddlinux22vpnfull_triage

Tags:

mirai ddos

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/682a21270de036ed65ab03cf/reports/9bd83da6-892e-4de2-b4ad-c62e5cf37836/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/b2f7992b-df44-4cfe-9d95-82b71f87b8a9

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

troj

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1693448

Signature

Multi AV Scanner detection for submitted file

Performs DNS queries to domains with low reputation

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/bf0163f36b3314fc30c294e9b7c33a9bbfa5d0cc6b907fb0952d517edc123a53

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/bf0163f36b3314fc30c294e9b7c33a9bbfa5d0cc6b907fb0952d517edc123a53/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-18 18:04:26 UTC

File Type:

ELF32 Big (Exe)

AV detection:

24 of 37 (64.86%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=x4awh43lgmkpymgcstu3pqz2to72lugmnoih7mevfvix5xashjjq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:horizon linux

Link:

https://tria.ge/reports/250518-wnnkqaan81/

Malware Config

C2 Extraction:

cnc.horizonisrising.xyz
scan.horizonisrising.xyz

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/bf0163f36b3314fc30c294e9b7c33a9bbfa5d0cc6b907fb0952d517edc123a53