Analysis
-
max time kernel
1s -
max time network
127s -
platform
debian-9_armhf -
resource
debian9-armhf-20221125-en -
resource tags
arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
14-05-2023 02:09
General
-
Target
8a96a8f5e2f987dea107dc4b6a0974de81ec9cd2868e449f9367dffddf77a811.elf
-
Size
26KB
-
MD5
f1e8dc36c23358f7e43d17f88ff41085
-
SHA1
a378587f98430d252921205da3be07dcb9f8a522
-
SHA256
8a96a8f5e2f987dea107dc4b6a0974de81ec9cd2868e449f9367dffddf77a811
-
SHA512
b0570243ea043af7b6085bfd336969beb652f78debe8171dc8bf6b0fe2bb1804f4db523cf384f2b6d1cd89c76b8aa4cdcb5d57c22e0ce3c2720c73a435c6913b
-
SSDEEP
768:4MKyhegCCMqfizjoNpd2vJdX6vwrv9q3UELu/:PKy4qfqoeJdXWgeLu
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
8a96a8f5e2f987dea107dc4b6a0974de81ec9cd2868e449f9367dffddf77a811.elfdescription ioc process File opened for reading /proc/self/exe 8a96a8f5e2f987dea107dc4b6a0974de81ec9cd2868e449f9367dffddf77a811.elf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/360-1-0x00008000-0x000228c4-memory.dmp