mirai | a8118f7042e9ed6f0910476325ee2a2437c9f7806cf9447ca29b56f48d0ce7a4

Analysis

max time kernel
1s
max time network
124s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
12/05/2023, 02:20

Target

db146c5819198fc0ebf15080c36b6c42c5bb059a889f6f79d85208e10595625e.elf
Size

28KB
MD5

e2119ec1f13f5dd2c562471fff18e102
SHA1

e72593eb89feea569211cf3719f145c07e90ffe0
SHA256

db146c5819198fc0ebf15080c36b6c42c5bb059a889f6f79d85208e10595625e
SHA512

36d612369af06d4845f496fa36930dcb24f87a30a243eac5a638cac51989f7b9f93a193f919493a4680afcf01bbfeb4e7bbc7c1b5245058e9aedd40b94e08486
SSDEEP

768:1/CfMn6YhmiYHiE6CbNTTfrL5GvElgEx9q3UELgqZ:Ik6YnjE6+NPfrovEkL5Z

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	db146c5819198fc0ebf15080c36b6c42c5bb059a889f6f79d85208e10595625e.elf

/tmp/db146c5819198fc0ebf15080c36b6c42c5bb059a889f6f79d85208e10595625e.elf
/tmp/db146c5819198fc0ebf15080c36b6c42c5bb059a889f6f79d85208e10595625e.elf
1⤵
- Reads runtime system information
PID:367