Analysis

  • max time kernel
    2s
  • max time network
    146s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20230621-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20230621-enkernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    20-08-2023 20:49

General

  • Target

    b47ce3c2c7f4f37ecfda1a06cae404fb.elf

  • Size

    28KB

  • MD5

    b47ce3c2c7f4f37ecfda1a06cae404fb

  • SHA1

    f153e7dcdab3c1f97f6073c164496e41de003f14

  • SHA256

    75f374f0b41ba83483e6943924db81ee467c7e13a1f44b8c23e8eaa742b4c05a

  • SHA512

    67231a8c21c5d705bae38b7828bfcf757809644b30b80189803c5de98ed2b9a6a0a1128563db8dd798bcef35837bc3a457a09a23a561116d9184976ecf382f47

  • SSDEEP

    768:CYSoXdJZUtqz0hVGTa/V7t4zY/R04O/eUSx0sH:CYJdJZmY03GU504LvtH

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/b47ce3c2c7f4f37ecfda1a06cae404fb.elf
    /tmp/b47ce3c2c7f4f37ecfda1a06cae404fb.elf
    1⤵
      PID:589

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/589-1-0x0000000000400000-0x0000000000510f28-memory.dmp