Analysis

  • max time kernel
    0s
  • max time network
    93s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20221125-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20221125-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    09-07-2023 07:02

General

  • Target

    4acaa34926903d31d1c7459f9.elf

  • Size

    29KB

  • MD5

    4acaa34926903d31d1c7459f9af76e66

  • SHA1

    ea8b053a4534bdb8dba3f85395db6462af796176

  • SHA256

    f9dc00599f64074d6b3d0b22fb55e675fb48759ebebee9afd1db6a91b03333b5

  • SHA512

    50c7777aad12ce26c3bdc9acd590f8b518243860d9b2a17252a7b70d07168068ba95d052f24d3659555c2723db64fe55cd2df95137f328a3802c0e2443123702

  • SSDEEP

    768:D1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNaCJbKWUD:DbDs06t4BEub4sU/MbUaC+D

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/4acaa34926903d31d1c7459f9.elf
    /tmp/4acaa34926903d31d1c7459f9.elf
    1⤵
      PID:327

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/327-1-0x00400000-0x00455b00-memory.dmp