Analysis

  • max time kernel
    0s
  • max time network
    126s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20221125-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20221125-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    30-05-2023 08:36

General

  • Target

    SecuriteInfo.com.Linux.Siggen.9999.15190.5072.elf

  • Size

    31KB

  • MD5

    1b90af93422736d27180ef22968bdc05

  • SHA1

    2114265d86f2bb6ab071128d02a123cb7fa3b3ae

  • SHA256

    076b8f462d0f38e96dcbb6c777169f3484104d011fad00df25d90b084e073404

  • SHA512

    84613bde233dc6d4cb2e1bc7eee3a86eba195545c8330780a5b96c9a615bad4b212d6607b0a900389d98ffc7348e91ec018c14ecefade47dbb56977a175d2237

  • SSDEEP

    768:12xG+t3d5HrHpn6zwHehi8S9AMNX7bfSWHioSlJgGlzDpbuR1JD:1s5Htn++A+COi/fVJuV

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/SecuriteInfo.com.Linux.Siggen.9999.15190.5072.elf
    /tmp/SecuriteInfo.com.Linux.Siggen.9999.15190.5072.elf
    1⤵
      PID:330

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/330-1-0x00400000-0x00459d20-memory.dmp