MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fdf62cfa97e55e52a17d5cfd6c4e3e618438327ab117a303c2a59f78618d819f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	fdf62cfa97e55e52a17d5cfd6c4e3e618438327ab117a303c2a59f78618d819f
SHA3-384 hash:	b2ece9cb2173d5e8d628992ec553c8cfa8ca19cec3ad15669aafe325153ec79a984863d1047a06c29ae3e8361962f085
SHA1 hash:	1b52eea40d3329974ab45048cb85276f02ceade8
MD5 hash:	c89ed6eb2d8de4a110f700f24083269c
humanhash:	oklahoma-ack-west-king
File name:	horizon.ppc
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	42'668 bytes
First seen:	2025-05-18 18:03:26 UTC
Last seen:	Never
File type:	elf
MIME type:	application/x-executable
ssdeep	768:jgoaHoDEFZ7/t+sSKJEhtUw5PnJtICVSnu0Gio:EoM3nJrfiX5PLVSn4R
TLSH	T16B13294273590943E4621EB0393F17E0A3BEF98022E4B5CA295FDB868235F735546F6E
Magika	elf
Reporter	abuse_ch
Tags:	elf mirai

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Unix.Dropper.Mirai-7135870-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135906-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135957-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135966-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7135967-0

Alert

Create hunting rule

Unix.Dropper.Mirai-7139230-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9935718-0

Alert

Create hunting rule

Unix.Trojan.Mirai-9940367-0

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

82.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=682a212be5aa44ec2e1a9079linux22vpnfull_triage

Tags:

n/a

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Connection attempt

DNS request

Runs as daemon

Opens a port

Receives data from a server

Sends data to a server

Substitutes an application name

Performs a bruteforce attack in the network

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/682a2126c609634bd7c7c0dd/reports/39bf5118-ef89-454f-b63d-ead8b9189f91/overview

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/4522caad-fd8a-4950-9e9a-1bcd2eb7a6fa

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

troj

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1693449

Signature

Multi AV Scanner detection for submitted file

Performs DNS queries to domains with low reputation

Uses known network protocols on non-standard ports

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ELF

Link:

https://malprob.io/report/fdf62cfa97e55e52a17d5cfd6c4e3e618438327ab117a303c2a59f78618d819f

CERT.PL MWDB mirai

Detection:

mirai

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/fdf62cfa97e55e52a17d5cfd6c4e3e618438327ab117a303c2a59f78618d819f/

ReversingLabs TitaniumCloud Linux.Worm.Mirai

Threat name:

Linux.Worm.Mirai

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-05-18 18:04:24 UTC

File Type:

ELF32 Big (Exe)

AV detection:

25 of 37 (67.57%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=7x3cz6ux4vpffil5lt6wytr6mgcdqmt2wel2ga6cuwpxqymnqgpq._file

Hatching Triage mirai

Result

Malware family:

mirai

Alert

Create hunting rule

Score:

  10/10

Tags:

family:mirai botnet:horizon linux

Link:

https://tria.ge/reports/250518-wnm9ysan8z/

Malware Config

C2 Extraction:

cnc.horizonisrising.xyz
scan.horizonisrising.xyz

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/fdf62cfa97e55e52a17d5cfd6c4e3e618438327ab117a303c2a59f78618d819f