Analysis

  • max time kernel
    1s
  • max time network
    133s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    26-04-2023 07:29

General

  • Target

    a750858daa7f39afb1bfd1dcc04ae5a3.elf

  • Size

    31KB

  • MD5

    a750858daa7f39afb1bfd1dcc04ae5a3

  • SHA1

    aa40bcbcfa103fdb5c8a40d76c718fe0fa1a5058

  • SHA256

    bc0b93110bb1def093a248bb7f378c6d621e623c79a73a55014185ee6e21bfed

  • SHA512

    44f7cf754bd0d9ade36ad171c11bda853e08923458b3bf775efca1ed01a2033cc98ee02eeb368eb2615672e2b2325ba8ec0fb0b1197d710e0dddf97fb2333dee

  • SSDEEP

    768:sfASZqlDB1ditjX6eE0BBc6u6g4r9PWlD9XVzmRRW7T:sbql1mtjq4g4r1w9YRY

Score
10/10

Malware Config

Extracted

Family

mirai

C2

bn.vboot.pw

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/a750858daa7f39afb1bfd1dcc04ae5a3.elf
    /tmp/a750858daa7f39afb1bfd1dcc04ae5a3.elf
    1⤵
      PID:335

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/335-1-0x00400000-0x00457df8-memory.dmp