CLEAN — 057a852e3bd8dd555b724f266ba22f97259fd4b65049ce463d6f50f3685da4d7.elf

CLEAN — 057a852e3bd8dd555b724f266ba22f97259fd4b65049ce463d6f50f3685da4d7.elf is a elf sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (0/100). 3 of 56 detection engines flagged it.

Identification

• SHA-256: 057a852e3bd8dd555b724f266ba22f97259fd4b65049ce463d6f50f3685da4d7
• SHA-1: 9a696bcd7b1f23af3217e5c23352b7712ea5c8b5
• MD5: f4d728ebfd692f08a98924add76bbe5f
• ssdeep: 1536:VZn0b2+BZpUJqv54VrPWTPXkWmDGlv5wywV6kxdRgc9YGJCiphwXUbOeM3z:L06spUi45WjXkfLd2ivUnz
• TLSH: T1FB3B0812EE662069E43986D98C84443D11CE075D8E28DFF9CECAAFE3845FA935D700E5
• Submitted as: 057a852e3bd8dd555b724f266ba22f97259fd4b65049ce463d6f50f3685da4d7.elf
• File type: elf · Size: 109376 bytes
• Verdict: clean (0/100)

Detections (3 of 56 engines)

• Microsoft Defender: Trojan:Linux/Mirai.Z!MTB
• Emsisoft (Emergency Kit): Trojan.Generic.40358088
• Kaspersky (KVRT): HEUR:Backdoor.Linux.Mirai.b

Dynamic analysis (linux)

866 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• desktop-hsgcbep._dosvc._tcp.local
• ntp.ubuntu.com
• desktop-hsgcbep
• 127.243.182.188
• 224.0.0.251
• ff02::fb
• 10.240.0.1
• 23.221.133.123
• 23.221.133.182
• ff02::1:3
• 224.0.0.252
• ff02::16
• 10.240.0.255
• 224.0.0.22
• ff02::1:2
• 20.42.73.24 US · Ashburn · AS8075 Microsoft Corporation
• 91.189.91.157
• 10.240.0.77
• ff02::1:ff12:3456
• ff02::1:ff4c:1d1d

Embedded IP addresses

• 20.42.73.24

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report