YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 8d8914c04156426e5ff3438778518a15d8ff1b6045d57b391929996d27a7d9a4.

Scan Results

SHA256 hash:	8d8914c04156426e5ff3438778518a15d8ff1b6045d57b391929996d27a7d9a4
File size:	54'204 bytes
File download:	Original
MIME type:	application/x-executable
MD5 hash:	3a01b2ef1421708333d7840ba0cea166
SHA1 hash:	a12fd6a1b5d9cc19486ef81237fdb9da63fcd3fb
SHA3-384 hash:	85144dcd9e82c7baa51fb933624351d00a78fa7c388ac3bd3abfee619e0c878f979e8fb2fc7b356ba2392af09ec8a527
First seen:	2025-11-21 00:01:24 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	768:AYZ8SfvufWuq96fu8zOoevR0sRlzhJdt9QgcpOR9s0v7l/iE+nKPaO+hTvlwas:oSfvufWuq96f58X3jv7lSK3+hjlwn
TLSH :	T123332989F747DAF0CC4305B0115FFB3BA936B9A12224DD77DBE0BAA37CB16425416A48 Create hunting rule
telfhash :	t1ec11297e1ea61ce877e49100c20ebbe109aee53f5b51b7a18332b51413e1e919579c39 Create hunting rule
gimphash :	n/a
dhash icon :	n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:	37fc2743-c66d-11f0-adeb-42010aa4000b
File name:	8d8914c04156426e5ff3438778518a15d8ff1b6045d57b391929996d27a7d9a4.elf
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:	Sanesecurity.Malware.28940.LC.UNOFFICIAL Create hunting rule

Signature:	Sanesecurity.Malware.29325.LC.Pl.UNOFFICIAL Create hunting rule

Signature:	SecuriteInfo.com.Linux.Mirai-81.UNOFFICIAL Create hunting rule

Signature:	Unix.Dropper.Mirai-7136013-0 Create hunting rule

Signature:	Unix.Trojan.Mirai-10011027-0 Create hunting rule

Signature:	Unix.Trojan.Mirai-10011918-0 Create hunting rule

Signature:	Unix.Trojan.Mirai-8025795-0 Create hunting rule

Signature:	Unix.Trojan.Mirai-9441505-0 Create hunting rule

Signature:	Unix.Trojan.Mirai-9858729-0 Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:	botnet_Yakuza Create hunting rule
Author:	NDA0E
Description:	Yakuza botnet
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	classified
Author:	classified
Description:	classified
TLP :	TLP:GREEN

Rule name:	classified
Author:	classified
Description:	classified
TLP :	TLP:GREEN

Rule name:	linux_generic_ipv6_catcher Create hunting rule
Author:	@_lubiedo
Description:	ELF samples using IPv6 addresses
TLP:	TLP:WHITE
Repository:	Stratosphere

Rule name:	Linux_Trojan_Gafgyt_28a2fe0c Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

Rule name:	Linux_Trojan_Gafgyt_ea92cca8 Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

Rule name:	Linux_Trojan_Mirai_3a56423b Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

Rule name:	Linux_Trojan_Mirai_6e8e9257 Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

Rule name:	maldoc_getEIP_method_1 Create hunting rule
Author:	Didier Stevens (https://DidierStevens.com)
TLP:	TLP:WHITE
Repository:

Rule name:	meth_get_eip Create hunting rule
Author:	Willi Ballenthin
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	classified
TLP :	TLP:AMBER

Rule name:	Mirai_Unpack Create hunting rule
TLP:	TLP:WHITE
Repository:	YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Disabled by submitter

Unpacked Files

The following files could be unpacked from this sample.