mirai | 304ec0fbfc3ce04e0b06d0507e5dfd7f315499690825fffee922210a2adfa833

Analysis

max time kernel
2s
max time network
126s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19-05-2023 18:56

Target

6bea1fbe87bc7f74b61c18e0a8426288.elf
Size

32KB
MD5

6bea1fbe87bc7f74b61c18e0a8426288
SHA1

c1a097d8f021bf801510a259ca4e137568b7c6d7
SHA256

304ec0fbfc3ce04e0b06d0507e5dfd7f315499690825fffee922210a2adfa833
SHA512

3aec2dd67d151cf6a985b6897f2918d47a1e315c9ba3d8aa6222369adc56882ab13eecd096f60ccb62fa34969f18300db9419713793d49ca2665eaa45383b884
SSDEEP

768:4WAp3TBDhskPxjU0tv3yrhs0hN1x3oMnaXifuvYfd9q3UELC1:4WApjQept+hs01x3oMaXi2pLs

Score

10^/10

mirai lzrd botnet

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

6bea1fbe87bc7f74b61c18e0a8426288.elf

description ioc process

File opened for reading /proc/self/exe 6bea1fbe87bc7f74b61c18e0a8426288.elf

description	ioc	process
File opened for reading	/proc/self/exe	6bea1fbe87bc7f74b61c18e0a8426288.elf

/tmp/6bea1fbe87bc7f74b61c18e0a8426288.elf
/tmp/6bea1fbe87bc7f74b61c18e0a8426288.elf
1⤵
- Reads runtime system information
PID:359