mirai | 3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445

Analysis

max time kernel
1s
max time network
127s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26/08/2023, 14:23

Target

3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445_JC.elf
Size

32KB
MD5

8b7970b31f04bbb705249519042cbbde
SHA1

0ace8ac31cec3b3750c7913c7206c2e8faa0d085
SHA256

3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445
SHA512

977ff991a95c1299aef6701a3a7a17568cec8216986921b00eb6522b48c6094a33805e8556e98d717d263f046419955ebcffc9d1e263b417e505072a7e2154b1
SSDEEP

768:koiWiO031vpAPbrVWZK3XVGxm9X3+9q3UEL5IM:korm1vpALgUJ3jLv

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445_JC.elf

/tmp/3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445_JC.elf
/tmp/3b9ee7421acafa6ca9e35f6c7841e00f193596ab5211fc86eadbe974f7238445_JC.elf
1⤵
- Reads runtime system information
PID:353