mirai | d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93

Analysis

max time kernel
1s
max time network
124s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
05/10/2023, 18:55

Target

d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93elf_JC.elf
Size

51KB
MD5

64746aa1ae9e640de5464a1cebbe0cb5
SHA1

ccf6a103fe1d7f4064dd6398331ca7daf4939c7c
SHA256

d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93
SHA512

080ac3e1a77c58a0a308575d039cbdadbfa5495e2bfe637d0f7ab389f77c5188a631d96023ee7a9fb15197d395d0e949323e3f4bdac25a43677390d782afb96d
SSDEEP

1536:s9O/ZMAXIxNUk0ZQTLcPqF1aBexo4opKZbL:s9O/ZNKyOTLGqFUFu

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93elf_JC.elf

/tmp/d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93elf_JC.elf
/tmp/d97be5e150df9ce104007acb033a475ccc3a23512e877de1476ac7777ae91f93elf_JC.elf
1⤵
- Reads runtime system information
PID:355