mirai | 07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71

Analysis

max time kernel
1s
max time network
124s
platform
linux_armhf
resource
debian9-armhf-en-20211208
resource tags

arch:armhfimage:debian9-armhf-en-20211208kernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
06/10/2023, 12:14

Target

07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71_JC.elf
Size

51KB
MD5

619cbb6302be1eaf064a4b5c5d0d88f6
SHA1

63256f0ea8f567ea8ea30168b08fe3a152bd3278
SHA256

07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71
SHA512

e7f7c4e7fccdd673ea82929c84b6796277acdd9c228d04b9ecf2221d3364e68c2c1e57b69f233573216953e5d38d02f1bc2388fbd4a1ef2b58a52226013f9384
SSDEEP

768:LBwqkrmTJaLf/gGet7r28XfO/kO771RpYd209q3UELzQEkkBF+MauMBexo46hpK7:L9O/gGetRvC19LcPqF1aBexo4opKZbV

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71_JC.elf

/tmp/07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71_JC.elf
/tmp/07a4b34295f340803b89b1e1deb9e48c8f4e25ee5f8a750ac8c41ff32b111f71_JC.elf
1⤵
- Reads runtime system information
PID:367