MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe
SHA3-384 hash: db64c380c9c71d14567b99b5e68500f37050bf7802acefb09582bcc0e9f49999b750b51eae9adb9349a9386c2fa3d8ce
SHA1 hash: 85e7eb011d7adb37cb070c226058587379d6a562
MD5 hash: 48aa8ceceeab8307ed0f83c0cd16a284
humanhash: mobile-salami-colorado-eleven
File name:Tsunami.arm-20211207-0550
Download: download sample
Signature Mirai
Create hunting rule
File size:29'996 bytes
First seen:2021-12-07 05:50:07 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:Lx2gBkNbpuDmXXx9ALQGLC+IenS5EYTZBBs3UozX:tJ2puDmR9SLC+IeSfTTszX
TLSH T111D2E0A1E146DD37CAB08C74E9676F1033F797ACA0AA38B1D2C8531436C281A5EFD583
Reporter tolisec
Tags:mirai

Intelligence

File Origin
# of uploads :
1
# of downloads :
120
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Link:
https://www.filescan.io/uploads/61aef64a4d8e6f3a5e163e99/reports/406c7c76-616e-41e1-99bf-8b9289d7a9ba/overview
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
23.94.37.59:80/bins
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Full report:
https://elfdigest.com/brief/d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Malware family:
Mirai
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/6b9e81af-9bd6-4b6d-a65c-f3edc39db3cd
Result
Threat name:
Mirai
Create hunting rule
Detection:
malicious
Classification:
troj.evad
Score:
76 / 100
Link:
https://www.joesandbox.com/analysis/902794
Signature
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Sample is packed with UPX
Yara detected Mirai
Behaviour
Behavior Graph:
Download SVG
Detection:
mirai
Create hunting rule
Link:
https://mwdb.cert.pl/sample/d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2021-12-07 05:51:09 UTC
File Type:
ELF32 Little (Exe)
AV detection:
11 of 45 (24.44%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Link:
https://tria.ge/reports/211207-gj6s6sgafk/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.38
Link:
https://yomi.yoroi.company/submissions/d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf d1060527bcb68dfd70c36b8eff8a75e9465cada8c5f4aeaafc6972cfbf6e7abe

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/1734493/
  
Delivery method
Distributed via web download

Comments