mirai | 5c2b894375a1aaf77c5e6bb53e8579e999564b4f47b016e1c9a1232d59094f4d

Analysis

max time kernel
0s
max time network
124s
platform
debian-9_mipsel
resource
debian9-mipsel-20230831-en
resource tags

arch:mipselimage:debian9-mipsel-20230831-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
07-10-2023 17:08

Target

NEAS.398ab2b6cb8822d7500887a9bbcce805elf_JC.elf
Size

29KB
MD5

398ab2b6cb8822d7500887a9bbcce805
SHA1

01950a63b04383550258dff73eb9901f9443b1a1
SHA256

5c2b894375a1aaf77c5e6bb53e8579e999564b4f47b016e1c9a1232d59094f4d
SHA512

b29a41d31d1e97c8d6e0188522da87c0ff6703d86343efbd0537172bf399a48aa88133332885e75c6a35736cb55be56b71ce846aa9a04047ea571a5b24c6ae0a
SSDEEP

768:M1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNBJbpWGPOA:MbDs06t4BEub4sU/MbUBzPv

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	NEAS.398ab2b6cb8822d7500887a9bbcce805elf_JC.elf

/tmp/NEAS.398ab2b6cb8822d7500887a9bbcce805elf_JC.elf
/tmp/NEAS.398ab2b6cb8822d7500887a9bbcce805elf_JC.elf
1⤵
- Reads runtime system information
PID:326