mirai | 0674b27743b452b3be4b9a15593136c7602ebb563757537b8d9f12cff4f54fa0

Analysis

max time kernel
3s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
02-03-2024 19:16

Target

a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf
Size

31KB
MD5

bd46606f734a1523d0f054f7e6f82865
SHA1

88d2f10b7007122122a6ff79a8edcc79d802b6dd
SHA256

a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b
SHA512

a076cf6e9d816c8879a430038dee8f40cef2c006b6842665caae3753fb4e2af74227e3328892daa1dca83b155c968f3df5c5ad495eda479a894ad01aa7dd0389
SSDEEP

768:pEKkUgXAnURCr6HmDFStmYt8QC9q3UELdj:dkEn7uHEem1Q3LF

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf

description ioc process

File opened for reading /proc/self/exe a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf

description	ioc	process
File opened for reading	/proc/self/exe	a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf

/tmp/a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf
/tmp/a7eff63dab2f23dbf8b9fcfbacf1f71d7e7a1a379b6c431cd61330da6daf221b.elf
1⤵
- Reads runtime system information
PID:657