× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 8a492c6b769c6581e1e8d20073fa3878518abbb1aac81174aa490c17c6263aaa
File name: 018b2a270be184829bd3b13d856c6a0f
Detection ratio: 25 / 57
Analysis date: 2018-03-29 01:32:58 UTC ( 1 year ago ) View latest
Antivirus Result Update
AegisLab Backdoor.Linux.Mirai!c 20180328
Antiy-AVL Trojan[Backdoor]/Linux.Mirai.b 20180329
Avast ELF:Mirai-JW [Trj] 20180328
Avast-Mobile ELF:Mirai-KL [Trj] 20180328
AVG ELF:Mirai-JW [Trj] 20180328
Avira (no cloud) LINUX/Mirai.ejnsy 20180328
Cyren ELF/Trojan.FYFJ-2 20180328
DrWeb Linux.Mirai.793 20180328
ESET-NOD32 a variant of Linux/Mirai.AT 20180328
Fortinet ELF/Mirai.AT!tr 20180328
GData Linux.Trojan.Agent.Y565IB 20180328
Jiangmin Backdoor.Linux.asdd 20180329
Kaspersky HEUR:Backdoor.Linux.Mirai.ba 20180328
MAX malware (ai score=96) 20180329
McAfee RDN/Generic BackDoor 20180328
McAfee-GW-Edition RDN/Generic BackDoor 20180329
Microsoft Backdoor:Linux/Mirai!rfn 20180329
NANO-Antivirus Trojan.Unix.Mirai.ezbpww 20180328
Qihoo-360 Win32/Trojan.395 20180329
Sophos AV Mal/Generic-S 20180329
Symantec Linux.Mirai 20180328
Tencent Linux.Backdoor.Mirai.Dlb 20180329
TrendMicro TROJ_GEN.F04JC00CL18 20180328
TrendMicro-HouseCall TROJ_GEN.F04JC00CL18 20180329
ZoneAlarm by Check Point HEUR:Backdoor.Linux.Mirai.ba 20180328
Ad-Aware 20180328
AhnLab-V3 20180328
Alibaba 20180328
Arcabit 20180328
AVware 20180328
Baidu 20180328
BitDefender 20180328
Bkav 20180328
CAT-QuickHeal 20180328
ClamAV 20180328
CMC 20180328
Comodo 20180329
CrowdStrike Falcon (ML) 20170201
Cybereason 20180225
Cylance 20180329
eGambit 20180329
Emsisoft 20180328
Endgame 20180316
F-Prot 20180328
F-Secure 20180329
Sophos ML 20180121
K7AntiVirus 20180328
K7GW 20180328
Kingsoft 20180329
Malwarebytes 20180328
eScan 20180329
nProtect 20180328
Palo Alto Networks (Known Signatures) 20180329
Panda 20180328
Rising 20180328
SentinelOne (Static ML) 20180225
SUPERAntiSpyware 20180328
Symantec Mobile Insight 20180311
TheHacker 20180327
TotalDefense 20180328
Trustlook 20180329
VBA32 20180328
VIPRE 20180328
ViRobot 20180328
WhiteArmor 20180324
Yandex 20180328
Zillya 20180328
Zoner 20180328
The file being studied is an ELF! More specifically, it is a EXEC (Executable file) ELF for Unix systems running on Intel 80386 machines.
ELF Header
Class ELF32
Data 2's complement, little endian
Header version 1 (current)
OS ABI UNIX - System V
ABI version 0
Object file type EXEC (Executable file)
Required architecture Intel 80386
Object file version 0x1
Program headers 3
Section headers 10
ELF sections
ELF Segments
.init
.text
.fini
.rodata
.ctors
.dtors
.data
.bss
Segment without sections
ExifTool file metadata
MIMEType
application/octet-stream

CPUByteOrder
Little endian

CPUArchitecture
32 bit

FileType
ELF executable

ObjectFileType
Executable file

CPUType
i386

File identification
MD5 018b2a270be184829bd3b13d856c6a0f
SHA1 f51ff26521ad17d5046995b2dfe4784380779b4f
SHA256 8a492c6b769c6581e1e8d20073fa3878518abbb1aac81174aa490c17c6263aaa
ssdeep
1536:SZ4pyHAH8TgbrnOIjuSo+qBNcuvkG92kFrkEU:qHAH6arnOIjuv+qvFvkGAkRrU

File size 48.6 KB ( 49752 bytes )
File type ELF
Magic literal
ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped

TrID ELF Executable and Linkable format (Linux) (50.1%)
ELF Executable and Linkable format (generic) (49.8%)
Tags
elf

VirusTotal metadata
First submission 2018-03-21 12:49:43 UTC ( 1 year, 1 month ago )
Last submission 2019-01-18 05:18:45 UTC ( 3 months ago )
File names 11
Owari.x86
018b2a270be184829bd3b13d856c6a0f
mal
018b2a270be184829bd3b13d856c6a0f
55
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!