Analysis

  • max time kernel
    0s
  • max time network
    125s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20221125-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20221125-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    09-05-2023 01:37

General

  • Target

    4570dec9d68259f66700caeea49fc00bb3b1f5613e51c17aad5c19779ec3467f.elf

  • Size

    29KB

  • MD5

    a1111866b7c60fedb94832dbac7f0eb6

  • SHA1

    b9c7c2979057bea095faaade01347f661a09d89a

  • SHA256

    4570dec9d68259f66700caeea49fc00bb3b1f5613e51c17aad5c19779ec3467f

  • SHA512

    8172b89a35b4769c9af5bf64cb9df620607dbf36760d3a7abe5fac8b7ba4622b64801ed00b9285750af77385c4eeb28e0a0e8a426a25bc6bc9236f8700baf178

  • SSDEEP

    384:i8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjqhx8MCRWGVCz0NvW:HMYHb62x4ahQ3CfdwLjzhx87WH

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/4570dec9d68259f66700caeea49fc00bb3b1f5613e51c17aad5c19779ec3467f.elf
    /tmp/4570dec9d68259f66700caeea49fc00bb3b1f5613e51c17aad5c19779ec3467f.elf
    1⤵
      PID:329

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/329-1-0x00400000-0x00455d70-memory.dmp