Analysis

  • max time kernel
    1s
  • max time network
    127s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221125-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    18/08/2023, 01:34

General

  • Target

    736f83ab519c674cff0be5e628002123.elf

  • Size

    32KB

  • MD5

    736f83ab519c674cff0be5e628002123

  • SHA1

    a45a9e4b0aa52ca2cd262c2c93293e7db3945c1c

  • SHA256

    3b7f17922d556befd8aa235a6d0e82d61a37c9fdaa1835a30a530dad635d71a0

  • SHA512

    837ab303b0f93af5a1e690419a185f54cf630d69981d1a6dfd9c8474ea16c15666b4e6ecc51be06563fe864c4b9d31ad2637b042e0d524602ce30dffd8d35e06

  • SSDEEP

    768:a84XvSLzLGTLrYK3frhANMng2eDBkZKK9q3UEL5I+:a89fELrYU4QgJkALl

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/736f83ab519c674cff0be5e628002123.elf
    /tmp/736f83ab519c674cff0be5e628002123.elf
    1⤵
    • Reads runtime system information
    PID:358

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads