Analysis

  • max time kernel
    1s
  • max time network
    153s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    01-07-2023 18:58

General

  • Target

    e11955063d6deb88ef7bcf9721ebf182.elf

  • Size

    29KB

  • MD5

    e11955063d6deb88ef7bcf9721ebf182

  • SHA1

    c7e3d79cc1ecf05d5afe605f2febca977bbbf1f7

  • SHA256

    f388bce5101e6708e4257dbacba42e7545108dcf3949128ad75e12ffcf110de2

  • SHA512

    551eb1eeb8a8478ef438da81575cd9cafdcb384abc35b49f54c794842ec26ee2b0f002f517241ea2385cc4978d2986607d3f9d89222838d2d2619707f46609c1

  • SSDEEP

    384:e8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjf9RWGVCz0Nv8:jMYHb62x4ahQ3CfdwLjwWZ

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/e11955063d6deb88ef7bcf9721ebf182.elf
    /tmp/e11955063d6deb88ef7bcf9721ebf182.elf
    1⤵
      PID:329

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/329-1-0x00400000-0x00455d70-memory.dmp