MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Mirai


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce
SHA3-384 hash: d19f5e1635633dc33c1e6e054bea6d930abee434e922b08b59611ac1475d089ed681af50d3d840beebfe87ddac13f8de
SHA1 hash: 9404e6127716b1e78810b722ca936a1f05ad245c
MD5 hash: 6027b1e824a2c86ccffd54e059cf7c94
humanhash: moon-snake-nebraska-nebraska
File name:mips
Download: download sample
Signature Mirai
Create hunting rule
File size:75'416 bytes
First seen:2025-01-31 22:31:12 UTC
Last seen:2025-02-01 07:20:53 UTC
File type: elf
MIME type:application/x-executable
ssdeep 1536:I6Rt6RYku2cNyOdlccPBVh1XfJvbSx0DWj5fkfn2PdEhOLNP4pdLflRTvgYu:zkTu2y9PBVh1XfJv1Wjmfn2PdQIApXR0
TLSH T1C6736C03AA215FF9C56CA23001F3C76D96E6269325E282C7E358DE11B7A435CAC5FED4
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence

File Origin
# of uploads :
2
# of downloads :
175
Origin country :
DE DE
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.ELF.Mirai-CVB.22350.26426.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=679d501d02140668e2cee902linux22vpnfull_triage
Tags:
n/a
Result
Verdict:
Clean
Maliciousness:
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
gcc
Link:
https://www.filescan.io/uploads/679d4f650ca4151de4d78f79/reports/fa3f8fe0-a420-492c-9f62-733aaf052577/overview
Result
Verdict:
UNKNOWN
Verdict:
Unknown
Link:
https://analyze.intezer.com/analyses/0c0bb41e-be0b-441e-92be-0e0ec5afa039
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
1 / 100
Link:
https://www.joesandbox.com/analysis/1604151
Behaviour
Behavior Graph:
n/a
Score:
100%
Verdict:
Malware
File Type:
ELF
Link:
https://malprob.io/report/ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce/
Threat name:
Linux.Trojan.Mirai
Create hunting rule
Status:
Malicious
First seen:
2025-01-31 22:32:04 UTC
File Type:
ELF32 Big (Exe)
AV detection:
8 of 24 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5sphp4iyl5seiyrqkgcm7cx46xisy7vvesrnh5ajbjsyugmmedha._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
discovery
Link:
https://tria.ge/reports/250131-2fx23symhv/
Behaviour
System Network Configuration Discovery
Verdict:
Unknown
Tags:
n/a
YARA:
n/a
Link:
https://app.threat.zone/submission/35fa7bfd-648f-4100-bc0a-f48b0351f468
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf ec9e77f1185f644462305184cf8afcf5d12c7eb524a2d3f4090a658a198c20ce

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3409585/
  
Delivery method
Distributed via web download

BLint

The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.

Findings
IDTitleSeverity
CHECK_PIEMissing Position-Independent Executable (PIE) Protectionhigh

Comments