mirai | 5a38c8f78d2865948490217dc4a2d3af9388d522ac0ce5927c914bf14e762230

Analysis

max time kernel
3s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19-12-2023 23:30

Target

6ad9082958af7ea433b3db58cfc59a51
Size

27KB
MD5

6ad9082958af7ea433b3db58cfc59a51
SHA1

0912de3b426c103ee9afda2326a3cf75636d25ed
SHA256

5a38c8f78d2865948490217dc4a2d3af9388d522ac0ce5927c914bf14e762230
SHA512

41bb0eed43f7bbee5fa4b64d9cec75758d5b5d808e0e406f3ccc6e07ccadcf9158f6e34fb53033af483a2aa5c1af8e88ef8c73964c6d3ac3f0a5a2eb9ee85995
SSDEEP

768:I+qUXimdorBNaUla4JI+e1fd3EwpG2hvTit2cbO0s3UozYr:0wUI4JIRtHpG2hvTitnKzYr

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	6ad9082958af7ea433b3db58cfc59a51

/tmp/6ad9082958af7ea433b3db58cfc59a51
/tmp/6ad9082958af7ea433b3db58cfc59a51
1⤵
- Reads runtime system information
PID:656