mirai | 37092d893478af6ac2582913aea6121b84cfc4e753eaeacc9051930af1e8c97c

Analysis

max time kernel
5s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19/12/2023, 23:17

Target

574e648a351c0ad0ae60c1ab10fdfde5
Size

33KB
MD5

574e648a351c0ad0ae60c1ab10fdfde5
SHA1

8afca8cd257e9d1a8619ec4f6b33db7151948623
SHA256

37092d893478af6ac2582913aea6121b84cfc4e753eaeacc9051930af1e8c97c
SHA512

1bed09d648c405533ce5b5800c95b5b53a4274d52fae380e409306f9e592b01d11931b7c59bd5c62f5154f2574639d07567ce4a9ef0aa001c34b3941e2630d84
SSDEEP

768:DarjeCSi9ZoHN3Hv1rdjJiazFDVZF7nELwWzdaB9q3UELfSY:Da3eYu/Rdlx/rlWzda0L1

Score

10^/10

mirai unst botnet

Family

mirai

Botnet

UNST

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	574e648a351c0ad0ae60c1ab10fdfde5

/tmp/574e648a351c0ad0ae60c1ab10fdfde5
/tmp/574e648a351c0ad0ae60c1ab10fdfde5
1⤵
- Reads runtime system information
PID:648