MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c8ff95037e7d111863ac6da808a9aba2d06770ec03be08479c0be6c9370cd7c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments 1

SHA256 hash: c8ff95037e7d111863ac6da808a9aba2d06770ec03be08479c0be6c9370cd7c2
SHA3-384 hash: 598faa2f40b91c23ae0ab0050317f19aa4a3e358b0acb8f3a4d803c3bb71c605d105831ba0ff0537185073bb3389715c
SHA1 hash: 72de5da74390a7c6a18b116f2382c5fbb9151597
MD5 hash: 302195f31a9bc622df2ec177c6dd3d66
humanhash: papa-ohio-tango-music
File name:302195f31a9bc622df2ec177c6dd3d66
Download: download sample
Signature Mirai
File size:20'772 bytes
First seen:2024-10-10 02:13:35 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 384:c/tgCbSJPQOQDEMWFXg7r+Efnxdv0hnjoA+I/sqBQIm3zu:Wtg8SJUmyvpJyoA+wsTa
TLSH T1D6923A528DA85E14E65CB5B4E0310B35A723FA26E7075FBE1D2645948083F8CFA9837F
TrID 50.1% (.) ELF Executable and Linkable format (Linux) (4022/12)
49.8% (.O) ELF Executable and Linkable format (generic) (4000/1)
Magika elf
Reporter zbetcheckin
Tags:32 elf gafgyt mirai renesas

Intelligence


File Origin
# of uploads :
1
# of downloads :
97
Origin country :
FR FR
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
anti-debug
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2024-10-10 03:08:56 UTC
AV detection:
13 of 24 (54.17%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf c8ff95037e7d111863ac6da808a9aba2d06770ec03be08479c0be6c9370cd7c2

(this sample)

  
Delivery method
Distributed via web download

Comments



Avatar
zbet commented on 2024-10-10 02:13:36 UTC

url : hxxp://51.81.104.123/bins/violetsh4