Analysis

  • max time kernel
    0s
  • max time network
    125s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20221125-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20221125-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    30-05-2023 00:11

General

  • Target

    e5bc8cc6e66bd15a2546b21904c9960e.elf

  • Size

    29KB

  • MD5

    e5bc8cc6e66bd15a2546b21904c9960e

  • SHA1

    b820655c50ae3ea4fba68ad049b5c9bc529ca9d1

  • SHA256

    d9a4d8b2d725296b82dbd8fde118aceb165ed37eaf4f335ad579f585fbe898e1

  • SHA512

    fa337277e082f3085a090ff2ee52e03e64d5dcd141649fd25beb9acf03d77f933b4fa2d8b5b647a98d67d2ee5e9764f5663e252211acbbf9180565c3f3691436

  • SSDEEP

    768:k1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNDFJbUWUR:kbDs06t4BEub4sU/MbUDFYR

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/e5bc8cc6e66bd15a2546b21904c9960e.elf
    /tmp/e5bc8cc6e66bd15a2546b21904c9960e.elf
    1⤵
      PID:326

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/326-1-0x00400000-0x00455b00-memory.dmp