mirai | ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
11-03-2024 02:26

Target

ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf
Size

26KB
MD5

4cc1947d80733fbfdbcd16344eed692b
SHA1

12914f8cc6e5827fdc7b784fcec19986fffea516
SHA256

ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab
SHA512

570952d9d37a35b7940f2d7f8f03754ce23ef970efb294f740cf77326183e330810a3fa9e49fb2c1d98eed33876734f6e153a3dca3d810aac7bfdf7d971f35a5
SSDEEP

768:7MKyhegCCMqfiJw3GkgjjGU/nmr5JoC5F9q3UELYZ+:QKy4qfN3CjjGUvE5YL8+

Score

10^/10

mirai lzrd botnet

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf

description ioc process

File opened for reading /proc/self/exe ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf

description	ioc	process
File opened for reading	/proc/self/exe	ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf

/tmp/ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf
/tmp/ff93065e3ddc51cf893d93d20ea4631c3975a0b4abdd93226a6b0cb78591b5ab.elf
1⤵
- Reads runtime system information
PID:643