mirai | c979b37465b23c1be40c5c95b26629e3a16512516a4cdcc0eadc06bedf156cab

Analysis

max time kernel
2s
platform
debian-9_armhf
resource
debian9-armhf-20231215-en
resource tags

arch:armhfimage:debian9-armhf-20231215-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
20/12/2023, 09:00

Target

993f78fab77508751b24c5e110856e12
Size

33KB
MD5

993f78fab77508751b24c5e110856e12
SHA1

026ad483db6c6d207c735966fa2ac4f227a4021f
SHA256

c979b37465b23c1be40c5c95b26629e3a16512516a4cdcc0eadc06bedf156cab
SHA512

c0833c0ca13cf6fa2eace1421cb6cb72d422e3a4e5da34bbfd64d35b54960853c09d6992aff9146c5803755896c02e09d4e4a08beeb34fda6e5f8a18350bdf09
SSDEEP

768:ulIEmC20OgbTOVQtyLg/P29k0oDmymylQFz/IxhgoNg0q/9XkP9O6Zf9q3UELbs:OIJvdgviQtyU/P29X6cFz/sgS9GwOiOE

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	993f78fab77508751b24c5e110856e12

/tmp/993f78fab77508751b24c5e110856e12
/tmp/993f78fab77508751b24c5e110856e12
1⤵
- Reads runtime system information
PID:652