mirai | 1c4430cd2a71fa734ccac4eef5958ad2cf027da19fdfbae0d20a9dc658fcd985

Analysis

max time kernel
2s
max time network
97s
platform
debian-9_armhf
resource
debian9-armhf-20221125-en
resource tags

arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
03-06-2023 08:47

Target

26cb9e0fb5d74267659190b0b6a21752.elf
Size

38KB
MD5

26cb9e0fb5d74267659190b0b6a21752
SHA1

10423ab6b59ce48e0193341f8c0b4d2080f729d6
SHA256

1c4430cd2a71fa734ccac4eef5958ad2cf027da19fdfbae0d20a9dc658fcd985
SHA512

0f664b9c6d9cd4f508ad1463e2fd7a475adba1d48673d046dc25fd663e8680135599a26c7d634e3c7d331c0a93ef61b67a054c540d5791d3b9c4a94f10b02a57
SSDEEP

768:FBqXQPOICC0yXVtubj3Q6JP83yuNFBexfMf5oc20SR5U3lABfiq3UirRO:TqAP1CCJ+bj4rNFBZKcnSRW3l1

Score

10^/10

mirai yakuza botnet

Family

mirai

Botnet

YAKUZA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

26cb9e0fb5d74267659190b0b6a21752.elf

description ioc process

File opened for reading /proc/self/exe 26cb9e0fb5d74267659190b0b6a21752.elf

description	ioc	process
File opened for reading	/proc/self/exe	26cb9e0fb5d74267659190b0b6a21752.elf

/tmp/26cb9e0fb5d74267659190b0b6a21752.elf
/tmp/26cb9e0fb5d74267659190b0b6a21752.elf
1⤵
- Reads runtime system information
PID:384