mirai | 41fb3f3f462573b08e250873cb9d5476213931fa339a0aee50290663542eb034

Analysis

max time kernel
3s
max time network
102s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02-06-2023 22:24

Target

c89b1d07cdbe80d9c6d885b5243de139.elf
Size

18KB
MD5

c89b1d07cdbe80d9c6d885b5243de139
SHA1

4ca4b84ac127b3e080dc0f4abfd0d63b7f5f7a4b
SHA256

41fb3f3f462573b08e250873cb9d5476213931fa339a0aee50290663542eb034
SHA512

ab84aeff0b04cd462bc3f6c475fa3a2aff4cd9c86676de272d1acd848554e1fb6521462a79892624eaf92a816af0f4c88e7566debc3635dc24e0939190117955
SSDEEP

384:M9eHKBGXaLKbt3PSgArJK2dRQQVCgyP6fuc1iWLvTOgJkFXmUR9jeQLq51+:zQGXiuK902dR7CgyyfukvTFJS3Rc+

Score

10^/10

mirai botnet

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

c89b1d07cdbe80d9c6d885b5243de139.elf

description ioc process

File opened for reading /proc/self/exe c89b1d07cdbe80d9c6d885b5243de139.elf

description	ioc	process
File opened for reading	/proc/self/exe	c89b1d07cdbe80d9c6d885b5243de139.elf

/tmp/c89b1d07cdbe80d9c6d885b5243de139.elf
/tmp/c89b1d07cdbe80d9c6d885b5243de139.elf
1⤵
- Reads runtime system information
PID:596