Analysis

  • max time kernel
    1s
  • max time network
    152s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    02-05-2023 01:25

General

  • Target

    c0b1db1c8bd1b35ebdebea7e0bb6a76e0c21eabb82894ab3b9a5d58661cddedb.elf

  • Size

    29KB

  • MD5

    4f948b7b80d812cff378a8ed14027466

  • SHA1

    ba7f984512a36556486c9c3b45141435a9f260bf

  • SHA256

    c0b1db1c8bd1b35ebdebea7e0bb6a76e0c21eabb82894ab3b9a5d58661cddedb

  • SHA512

    a480108606f14500443a43fae56f2b7e70a70afd3eedfcc70216362211069fa0619d8b927e77d4a59b5939eb7edb60aad98b1bd5740aa9ac6d9a592a195f71c1

  • SSDEEP

    768:a1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KN+Y1iJbsWU9:abDs06t4BEub4sU/MbU+YAg9

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/c0b1db1c8bd1b35ebdebea7e0bb6a76e0c21eabb82894ab3b9a5d58661cddedb.elf
    /tmp/c0b1db1c8bd1b35ebdebea7e0bb6a76e0c21eabb82894ab3b9a5d58661cddedb.elf
    1⤵
      PID:326

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/326-1-0x00400000-0x00455b00-memory.dmp