Analysis

  • max time kernel
    3s
  • max time network
    102s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08-05-2023 22:43

General

  • Target

    46c982fd8c769136b0729969b2b42228.elf

  • Size

    28KB

  • MD5

    46c982fd8c769136b0729969b2b42228

  • SHA1

    3c6ca16b4d94467d91ad3b0e637908d8b73f52ba

  • SHA256

    49868df3ee08e44d827b66f42bd8d2c5c174cab0e513de0e3c61858c4cc1432a

  • SHA512

    6d728282fb0e786ec61ea4fbbf2f21faf0ab4e542dc9be70f6e484dab482568642df5b5f96fce41b62484a7fedd306bc233f9507bc1954a1b4fc6f45778b4453

  • SSDEEP

    768:sYSoXdJZETc51aBfdNRQkHy3xWEMcw6qBfq9oSx0sZ:sYJdJZiy1aBnQfTqBfUTtZ

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/46c982fd8c769136b0729969b2b42228.elf
    /tmp/46c982fd8c769136b0729969b2b42228.elf
    1⤵
      PID:574

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/574-1-0x0000000000400000-0x0000000000510f28-memory.dmp