Analysis

  • max time kernel
    3s
  • max time network
    102s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    05-06-2023 10:58

General

  • Target

    49b55b5189424fa00c16d438cfcab0e1.bin

  • Size

    18KB

  • MD5

    49b55b5189424fa00c16d438cfcab0e1

  • SHA1

    488e9f9035076250cea5e41119f41d63f25c474e

  • SHA256

    caf577935671be92ac6d345a23f49168787250316edbe6ddccebdfbcdec385eb

  • SHA512

    1e53a0a1a69faa2db102efba490020e9f3652b0f177ece69b0343522a1f082e5cd068ce16b3f8cd36e79745bdb20797420f73abefe8527d5be21a72a505a5ad0

  • SSDEEP

    384:MWeHKBGXaLKbt3PSgArJK2dRQQeCPKlFYjKN399R5lBHcUexKXnUbeQLq51e:MQGXiuK902dRECPJeN9jlBHcUeA3Pe

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/49b55b5189424fa00c16d438cfcab0e1.bin
    /tmp/49b55b5189424fa00c16d438cfcab0e1.bin
    1⤵
    • Reads runtime system information
    PID:596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/596-1-0x0000000008048000-0x00000000080536e0-memory.dmp