MALICIOUS — 043bdf3f2ec52afa39922ea6a7cb3e4830361de4242a448e9e0b9561148a2ad0.elf
Verdict: malicious (97/100) · Family: Mirai
File type: elf · SHA-256: 043bdf3f2ec52afa39922ea6a7cb3e4830361de4242a448e9e0b9561148a2ad0
Source: MalwareBazaar · first seen 2026-07-28T00:00:00.000Z · SHA-256 verified
MITRE ATT&CK
YARA
Dynamic analysis (linux)
940 behavior events · 0 ATT&CK techniques · 1 dropped files.
Runtime network
- _dosvc._tcp.local
- desktop-hsgcbep
- _http._tcp.archive.ubuntu.com
- archive.ubuntu.com
- b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 252.0.0.224.in-addr.arpa
- reservphotoinstaynow.shop
- ntp.ubuntu.com
- 250.255.255.239.in-addr.arpa
- archive.ubuntu.com/ubuntu/pool/main/t/tar/tar_1.34+dfsg-1ubuntu0.1.22.04.6_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/g/glibc/libc6_2.35-0ubuntu3.14_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/k/krb5/libk5crypto3_1.19.2-2ubuntu0.8_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5support0_1.19.2-2ubuntu0.8_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/p/pam/libpam-modules_1.4.0-11ubuntu2.7_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/p/pam/libpam0g_1.4.0-11ubuntu2.7_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/g/glibc/libc-bin_2.35-0ubuntu3.14_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/n/ntfs-3g/libntfs-3g89_2021.8.22-3ubuntu1.4_amd64.deb
- archive.ubuntu.com/ubuntu/pool/main/n/ntfs-3g/ntfs-3g_2021.8.22-3ubuntu1.4_amd64.deb
Analyzed on MalwareAnalyzer by Cyble · Open interactive report