mirai | 8d732d40bb3434f2788738725eff5c88329285473d18185c0e62add9d71b5daf

Analysis

max time kernel
1s
max time network
124s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
01-05-2023 02:30

Target

176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf
Size

73KB
MD5

ff8d37b5eb9a6fe2d4cf95c263b3f010
SHA1

0d1d3477142b2a71118e5da2839179a9543b84be
SHA256

176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25
SHA512

c4841a6e980c075e558cd0135fd749313f63296c20cea46411ad6b572f6a4050407b5cde3ca3c96478ca64480cf4342317fbfc4948cdd4c1f48bed61089c7360
SSDEEP

1536:dlxuGm5GmZxHG+EOGIkSdtCvz+VbPq+2URk30eH:rgGmYsHoOGGdtGz+VD/dk7H

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf

description ioc process

File opened for reading /proc/self/exe 176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf

description	ioc	process
File opened for reading	/proc/self/exe	176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf

/tmp/176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf
/tmp/176514ffaf96c43a282fcd68a727295aba828d47cc7d6a780c7804da35607d25.elf
1⤵
- Reads runtime system information
PID:355