mirai | 57cc362a0508434111210a9daf99f2c003c7c99f92631b4eb11c51158597de5c

Analysis

max time kernel
2s
max time network
126s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
11-07-2023 11:18

Target

a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577.elf
Size

50KB
MD5

ade9a4133f39b69735f1080438af5419
SHA1

0eee476a16abf6a686f4c043f6f8b30e4141851f
SHA256

a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577
SHA512

5be6a3cbe19d04a3f69ef08c12b6fdefc7184e3996718b0f4c65b7f218099e78eb531558f02eef2f9165f72938f1cc854ad62fbf44c2f5aca9aba9ab61a943e3
SSDEEP

1536:oCoqsGR4ygC1D7aH5k0JDXTZrL9VE8amFZP7R3K:Foqs25Vuf5XT1LJ9ZP7R3K

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577.elf

/tmp/a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577.elf
/tmp/a887e346bfbf95a862504e3775814e8d38109cdefae0bac96421e6c2782bf577.elf
1⤵
- Reads runtime system information
PID:351