| SHA256: | fda994f7e28505c824ec374d05857d85b832517ffdf6d78adbb9db81e4974371 |
| File name: | 149 |
| Detection ratio: | 20 / 60 |
| Analysis date: | 2018-12-27 05:25:39 UTC ( 1 month, 3 weeks ago ) |
| Antivirus | Result | Update |
|---|---|---|
| AhnLab-V3 | Linux/Mirai.Gen3 | 20181226 |
| Antiy-AVL | Trojan[Backdoor]/Linux.Mirai.ba | 20181227 |
| Avast | ELF:Mirai-HU [Trj] | 20181227 |
| Avast-Mobile | ELF:Mirai-ID [Trj] | 20181226 |
| AVG | ELF:Mirai-HU [Trj] | 20181227 |
| DrWeb | Linux.Mirai.793 | 20181227 |
| ESET-NOD32 | a variant of Linux/Mirai.AT | 20181227 |
| Fortinet | ELF/Mirai.AT!tr | 20181227 |
| GData | Linux.Trojan.Mirai.J | 20181226 |
| Ikarus | Trojan.Linux.Mirai | 20181226 |
| Jiangmin | Backdoor.Linux.andk | 20181226 |
| Kaspersky | HEUR:Backdoor.Linux.Mirai.ba | 20181226 |
| McAfee | Linux/mirai.d | 20181226 |
| McAfee-GW-Edition | Linux/mirai.d | 20181226 |
| SentinelOne (Static ML) | static engine - malicious | 20181223 |
| Symantec | Linux.Mirai | 20181226 |
| Tencent | Backdoor.Linux.Mirai.vu | 20181227 |
| TrendMicro | Possible_MIRAI.SMLBEM2 | 20181227 |
| TrendMicro-HouseCall | Possible_MIRAI.SMLBEM2 | 20181227 |
| ZoneAlarm by Check Point | HEUR:Backdoor.Linux.Mirai.ba | 20181227 |
| Acronis | 20181227 | |
| Ad-Aware | 20181227 | |
| AegisLab | 20181227 | |
| Alibaba | 20180921 | |
| ALYac | 20181227 | |
| Arcabit | 20181227 | |
| Avira (no cloud) | 20181226 | |
| AVware | 20180925 | |
| Babable | 20180918 | |
| Baidu | 20181207 | |
| BitDefender | 20181227 | |
| Bkav | 20181224 | |
| CAT-QuickHeal | 20181226 | |
| ClamAV | 20181227 | |
| CMC | 20181226 | |
| Comodo | 20181227 | |
| CrowdStrike Falcon (ML) | 20181022 | |
| Cybereason | 20180225 | |
| Cylance | 20181227 | |
| Cyren | 20181227 | |
| eGambit | 20181227 | |
| Emsisoft | 20181227 | |
| Endgame | 20181108 | |
| F-Prot | 20181227 | |
| F-Secure | 20181226 | |
| Sophos ML | 20181128 | |
| K7AntiVirus | 20181226 | |
| K7GW | 20181226 | |
| Kingsoft | 20181227 | |
| Malwarebytes | 20181226 | |
| MAX | 20181227 | |
| Microsoft | 20181226 | |
| eScan | 20181226 | |
| NANO-Antivirus | 20181226 | |
| Palo Alto Networks (Known Signatures) | 20181227 | |
| Panda | 20181226 | |
| Qihoo-360 | 20181227 | |
| Rising | 20181227 | |
| Sophos AV | 20181227 | |
| SUPERAntiSpyware | 20181226 | |
| Symantec Mobile Insight | 20181225 | |
| TACHYON | 20181226 | |
| TheHacker | 20181225 | |
| TotalDefense | 20181227 | |
| Trapmine | 20181205 | |
| Trustlook | 20181227 | |
| VBA32 | 20181226 | |
| VIPRE | 20181227 | |
| ViRobot | 20181227 | |
| Webroot | 20181227 | |
| Yandex | 20181226 | |
| Zillya | 20181227 | |
| Zoner | 20181227 |
The file being studied is an ELF!
More specifically, it is a EXEC (Executable file) ELF
for Unix systems running on Intel 80386 machines.
ELF Header
Class ELF32
Data 2's complement, little endian
Header version 1 (current)
OS ABI UNIX - System V
ABI version 0
Object file type EXEC (Executable file)
Required architecture Intel 80386
Object file version 0x1
Program headers 3
Section headers 10
ELF sections
ELF Segments
ExifTool file metadata
MIMEType
application/octet-stream
CPUByteOrder
Little endian
CPUArchitecture
32 bit
FileType
ELF executable
ObjectFileType
Executable file
CPUType
i386
File identification
MD5 f4886b75600cf89638ba5a53f1b89e8c
SHA1 9b136f4419461756fb4cd5f24e4a9f5182a9a02d
SHA256 fda994f7e28505c824ec374d05857d85b832517ffdf6d78adbb9db81e4974371
ssdeep
768:gjo8WnBsux3TUi32+4qbBYSWLXB9vnbBo1BYMbJoSlO+Meb4al4:gWBsux3TUiG9qbBYSWR9vy1BY8JoSlOk
File size
44.6 KB ( 45656 bytes )
File type ELF
Magic literal
ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
| TrID |
ELF Executable and Linkable format (Linux) (50.1%) ELF Executable and Linkable format (generic) (49.8%) |
Tags
elf
VirusTotal metadata
First submission
2018-12-27 05:25:39 UTC ( 1 month, 3 weeks ago )
Last submission
2018-12-27 05:25:39 UTC ( 1 month, 3 weeks ago )
| File names |
Unbound.x86 149 |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!