MALICIOUS — 4d70c592117d87144a826f81b53227f2756fa93015ea251050418b7f28bfa449.elf
MALICIOUS — 4d70c592117d87144a826f81b53227f2756fa93015ea251050418b7f28bfa449.elf is a elf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Mirai family. 5 of 56 detection engines flagged it.
Identification
- SHA-256:
4d70c592117d87144a826f81b53227f2756fa93015ea251050418b7f28bfa449 - SHA-1:
6fd1a3d6e9b4f0b7c90f88371abf3049ff8d5e21 - MD5:
ed08687f974a1a19e3b8f76d1a7340d3 - ssdeep:
3072:vEWK3B33zFmdUXAeJ+4gJeXzAt+lLnuJTjtOEV/YGkYGR:vEWK3R3hm2XAeJ+4gJeXZuxjpQO8 - TLSH:
T1873B2B2902073152E3F3DD41F8195CADD153B65E7035A1CEC11ACE8D72EC267AFA8296 - Submitted as: 4d70c592117d87144a826f81b53227f2756fa93015ea251050418b7f28bfa449.elf
- File type: elf · Size: 109968 bytes
- Verdict: malicious (89/100) · Family: Mirai
Source: MalwareBazaar · first seen 2026-08-02T00:00:00.000Z · SHA-256 verified
Detections (5 of 56 engines)
- ClamAV (daily): Unix.Trojan.Mirai-7100807-0
- YARA: Stratosphere IPS: STRATO_Malicious_UserAgent
- Microsoft Defender: Backdoor:Linux/Mirai.BJ!MTB
- Emsisoft (Emergency Kit): Gen:Variant.Linux.DDoS.2
- Kaspersky (KVRT): HEUR:Backdoor.Linux.Mirai.cw
Why this verdict
The malicious score of 89/100 is the fusion of 2 weighted signals:
- ClamAV (daily) flagged Unix.Trojan.Mirai-7100807-0 (rule
Unix.Trojan.Mirai-7100807-0) - engine signal, weight 0.90, confidence 0.95 - YARA: Stratosphere IPS flagged STRATO_Malicious_UserAgent (rule
STRATO_Malicious_UserAgent) - engine signal, weight 0.35, confidence 0.70
Dynamic analysis (linux)
836 behavior events · 0 ATT&CK techniques · 0 dropped files.
Runtime network
- desktop-hsgcbep
- 250.255.255.239.in-addr.arpa
- b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 252.0.0.224.in-addr.arpa
- 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- ff02::1:3
- 224.0.0.252
- 10.240.0.255
- 226.96.186.253
- 238.150.142.114
- 230.5.86.117
- 239.56.54.241
- 227.225.12.209
- 225.1.26.24
- 237.25.18.241
- 238.132.92.173
- 232.22.226.21
- 233.105.140.251
- 232.102.252.68
More Mirai samples · Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report