Analysis
-
max time kernel
153s -
max time network
150s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
30-04-2023 11:06
General
-
Target
76453333c2cc598fb5296ccdcbd23f7f.elf
-
Size
22KB
-
MD5
76453333c2cc598fb5296ccdcbd23f7f
-
SHA1
e3e1556a20c9355f4f8e5574be24aea5c2c3bcc2
-
SHA256
c1e9f36f5effbe4f017714d64e19c13bbdce2825f98f616004788f81087b2377
-
SHA512
15f4ecc9b5a6e15510e6a60b2f07129b7f046783c981387ad68b2fce48dde6d8d7118c6573a1811622d1224c0e3d58c002c84294e3b46ba7f1e737c89f7e5844
-
SSDEEP
384:qZRb4hXnbGjJHxtbHHg1A+giifPCHJjWkiaIuIejsCPzUoMPotiBK7s1cliFqcJS:qZRUbGjJrM1U1CH5BItY4oMtue8sk
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Reads runtime system information 10 IoCs
Reads data from /proc virtual filesystem.
Processes:
description ioc File opened for reading /proc/417/cmdline File opened for reading /proc/453/cmdline File opened for reading /proc/580/cmdline File opened for reading /proc/581/cmdline File opened for reading /proc/582/cmdline File opened for reading /proc/588/cmdline File opened for reading /proc/423/cmdline File opened for reading /proc/425/cmdline File opened for reading /proc/451/cmdline File opened for reading /proc/583/cmdline