Analysis

  • max time kernel
    1s
  • max time network
    153s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    07-05-2023 10:59

General

  • Target

    a1111866b7c60fedb94832dbac7f0eb6.elf

  • Size

    29KB

  • MD5

    a1111866b7c60fedb94832dbac7f0eb6

  • SHA1

    b9c7c2979057bea095faaade01347f661a09d89a

  • SHA256

    4570dec9d68259f66700caeea49fc00bb3b1f5613e51c17aad5c19779ec3467f

  • SHA512

    8172b89a35b4769c9af5bf64cb9df620607dbf36760d3a7abe5fac8b7ba4622b64801ed00b9285750af77385c4eeb28e0a0e8a426a25bc6bc9236f8700baf178

  • SSDEEP

    384:i8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjqhx8MCRWGVCz0NvW:HMYHb62x4ahQ3CfdwLjzhx87WH

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/a1111866b7c60fedb94832dbac7f0eb6.elf
    /tmp/a1111866b7c60fedb94832dbac7f0eb6.elf
    1⤵
      PID:329

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/329-1-0x00400000-0x00455d70-memory.dmp