Analysis

  • max time kernel
    3s
  • max time network
    102s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    14-05-2023 08:23

General

  • Target

    2b9cff4bd1c237cedd68998260fb4c3c.elf

  • Size

    28KB

  • MD5

    2b9cff4bd1c237cedd68998260fb4c3c

  • SHA1

    1c1c787395bbb90cba83e5f0c25efac1d7c56162

  • SHA256

    eb47756f47856d9ab4a0b425e9e5781f9a8845592966ce2b67a776600f09c0f2

  • SHA512

    78dd6e5e124b0707995da76ac7586de23409ed05d030396877fda55dd51ea576de88e0d8cf69747da54c696ef73d6df80da19ce10ae4b4a575d2258ea8f56bb7

  • SSDEEP

    384:MSd/PxEDLd2TwULzm6lowYcEaqsp9qC450LQixBfE4jdlz0lewZ90BKdzNQKTsNA:llxKd2FLPxEnspd6IHE4RlY990czjTJT

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/2b9cff4bd1c237cedd68998260fb4c3c.elf
    /tmp/2b9cff4bd1c237cedd68998260fb4c3c.elf
    1⤵
      PID:575

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/575-1-0x0000000008048000-0x0000000008059740-memory.dmp