MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f6be0f2195ee96a5899bc2934980c1925354dbe7cb672d703a982548bd064999. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Mirai


Vendor detections: 11


Intelligence 11 IOCs YARA File information Comments

SHA256 hash: f6be0f2195ee96a5899bc2934980c1925354dbe7cb672d703a982548bd064999
SHA3-384 hash: e5ceb665c6a526f4b7ec000e5e2245f2fd4e5c59d4112862289fdf8409cfb195919cba3c33dd341026e8632f26cc496f
SHA1 hash: 143bc974cfb9830c23c04a84017997d07012dba2
MD5 hash: 5128a5733873f43cb53b6df4d78da17e
humanhash: cup-tango-skylark-one
File name:Owari.m68k
Download: download sample
Signature Mirai
File size:52'360 bytes
First seen:2025-02-11 15:56:49 UTC
Last seen:Never
File type: elf
MIME type:application/x-executable
ssdeep 768:p8eTIuI9Me1KyWFr/Qhyuw3gFHnuGU7wWWJUH8w9KqQeO8tT8:eeId9MUKBEoAFnuGUwfUH8wkqQV8R8
TLSH T1E53309DAB402AD7CF98EEABE80670E09B23033145153172767ABFDD37D32154E952E86
Magika elf
Reporter abuse_ch
Tags:elf mirai

Intelligence


File Origin
# of uploads :
1
# of downloads :
85
Origin country :
DE DE
Vendor Threat Intelligence
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
masquerade
Result
Verdict:
MALICIOUS
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
56 / 100
Signature
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1612259 Sample: Owari.m68k.elf Startdate: 11/02/2025 Architecture: LINUX Score: 56 42 66.106.2.240 XO-AS15US United States 2->42 44 165.136.35.92 WISCNET1-ASUS United States 2->44 46 99 other IPs or domains 2->46 48 Antivirus / Scanner detection for submitted sample 2->48 50 Multi AV Scanner detection for submitted file 2->50 10 Owari.m68k.elf 2->10         started        signatures3 process4 process5 12 Owari.m68k.elf 10->12         started        14 Owari.m68k.elf 10->14         started        16 Owari.m68k.elf 10->16         started        process6 18 Owari.m68k.elf 12->18         started        20 Owari.m68k.elf 12->20         started        22 Owari.m68k.elf 14->22         started        24 Owari.m68k.elf 14->24         started        26 Owari.m68k.elf 14->26         started        process7 28 Owari.m68k.elf 18->28         started        30 Owari.m68k.elf 18->30         started        32 Owari.m68k.elf 18->32         started        34 Owari.m68k.elf 22->34         started        36 Owari.m68k.elf 22->36         started        process8 38 Owari.m68k.elf 28->38         started        40 Owari.m68k.elf 28->40         started       
Threat name:
Linux.Trojan.Mirai
Status:
Malicious
First seen:
2025-02-11 15:57:20 UTC
File Type:
ELF32 Big (Exe)
AV detection:
17 of 24 (70.83%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:mirai botnet:owari linux
Verdict:
Malicious
Tags:
Unix.Trojan.Mirai-6981989-0
YARA:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Mirai

elf f6be0f2195ee96a5899bc2934980c1925354dbe7cb672d703a982548bd064999

(this sample)

  
Delivery method
Distributed via web download

Comments