mirai | c2319a6267a14275f603010a6523f105934349f6f539318d44af08edc46f062e

Analysis

max time kernel
1s
max time network
124s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
04/07/2023, 13:37

Target

arm6nnelf.elf
Size

31KB
MD5

bcae8c1b9b555f6bea77ad26fd024d85
SHA1

3ce3e095e8e1c43434b16b0d08ea32821cae7374
SHA256

c2319a6267a14275f603010a6523f105934349f6f539318d44af08edc46f062e
SHA512

fe2a68ae2cef39af9480f2e90269b085e30882955a4ca9c70a2e5d8e50a050c4ec4381360c76671a4eb9e672f635f50eec21e969552cd1e851cf4d5ca7612fdc
SSDEEP

384:uGkdbCtqh0CNAUaP+Ky3l4zvZPNdrF3uxsurMqR1BNBDIxoFsm/jqnHkqDLqmdGE:QaqhiRPzMKprF3uwqR1BPK8sxhq3UIGh

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	arm6nnelf.elf

/tmp/arm6nnelf.elf
/tmp/arm6nnelf.elf
1⤵
- Reads runtime system information
PID:355