mirai | fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7

Analysis

max time kernel
1s
max time network
128s
platform
debian-9_armhf
resource
debian9-armhf-20221125-en
resource tags

arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26/08/2023, 15:40

Target

fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7_JC.elf
Size

28KB
MD5

1e53a1a8608399ef8d599e90bf291f16
SHA1

a348534c3b8950f90b480c1a1de5db762b4211df
SHA256

fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7
SHA512

cfebb6b07538a781dbb14987e47241f89d28b4d045e0ae57d6bbc8b7d1b835814c131c4d8c9ad1f03d3e8bf37286c41c198ebded8b330e9de698734c0cddd4e4
SSDEEP

768:EusHfRavjynNKnjFcZIhQzhKMXgB+689q3UEL7N:WRwynNIOQQ1KMwbFLx

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7_JC.elf

/tmp/fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7_JC.elf
/tmp/fac608995cb26410fb63b4559da4066fdce43947ed15e84754afdd9f13724fc7_JC.elf
1⤵
- Reads runtime system information
PID:360