mirai | 3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039

Analysis

max time kernel
1s
max time network
127s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26/08/2023, 14:24

Target

3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039_JC.elf
Size

26KB
MD5

b12f06365beb9c71d44d1401ac252607
SHA1

d4dead1150e5977c3940e141475366dc3edb314c
SHA256

3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039
SHA512

598ecbafbdf9128b2083d36c8b82f7808b584bec697811b96c4c2416cb14b9b5abc6e9325393202cec6bde08cd5833d9b70124325f280028f2ff71bd01f35e77
SSDEEP

768:JMKyhegCCMqfizjoNpd2vJdX6vwrZh9q3UELuD:OKy4qfqoeJdXWgZULa

Score

10^/10

mirai lzrd botnet

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039_JC.elf

/tmp/3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039_JC.elf
/tmp/3e4e2abcb85b55b0e6e7a493f127337565e192f98ac8a2df26ff9141c8a9a039_JC.elf
1⤵
- Reads runtime system information
PID:366