MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eebd97be93fb96d85320a8241e41ac4a8d87bd5f0e2a0f77a49605bb2c65d99c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments 1

SHA256 hash: eebd97be93fb96d85320a8241e41ac4a8d87bd5f0e2a0f77a49605bb2c65d99c
SHA3-384 hash: bb794a2df677acd938a41eb250421b65ff054669c290eb79afd81fcb7afe394a4c275c46c57785808630033f240e105b
SHA1 hash: 40404f6ea9aa581d31a07f4ef1c37e1e5108b1d5
MD5 hash: 27b31ad80c9872c45862a6e6e3420344
humanhash: helium-fish-purple-magnesium
File name:27b31ad80c9872c45862a6e6e3420344
Download: download sample
Signature Mirai
File size:22'636 bytes
First seen:2021-10-16 13:53:05 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 384:2eQ79GQ6g2P+Eitn1cqiGwWyrpcExYw6Qmk1GVNnjLKcAL9IhdmdGU5EJ:FQRw+Eyn14G6rVY21ijLfUIP3UW
TLSH T13AA2D1D1B0CC56B387E04435FAED428A7A4D2A7ED9C336A4D510977886C248A5BFC16B
Reporter zbetcheckin
Tags:32 arm elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
137
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
anti-debug
Verdict:
Malicious
Uses P2P?:
false
Uses anti-vm?:
false
Architecture:
arm
Packer:
UPX
Botnet:
unknown
Number of open files:
0
Number of processes launched:
0
Processes remaning?
false
Remote TCP ports scanned:
not identified
Behaviour
no suspicious findings
Botnet C2s
TCP botnet C2(s):
not identified
UDP botnet C2(s):
not identified
Result
Verdict:
UNKNOWN
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2021-10-16 13:54:06 UTC
AV detection:
9 of 44 (20.45%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
linux
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf eebd97be93fb96d85320a8241e41ac4a8d87bd5f0e2a0f77a49605bb2c65d99c

(this sample)

  
Delivery method
Distributed via web download

Comments



Avatar
zbet commented on 2021-10-16 13:53:06 UTC

url : hxxp://45.148.10.245/lx/apep.arm5