mirai | a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
15-03-2024 17:50

Target

799c8b943356c72c09dfb838aed3bfba.elf
Size

28KB
MD5

799c8b943356c72c09dfb838aed3bfba
SHA1

e9b0f605c82b58c9cb13709f5b02d059392b7c68
SHA256

a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6
SHA512

b348fe467e092bd84aa2a09ae76e64e80f314b94d52435d79129c3b553236dc0586b7d260b5158642df0ae125287519039ca64710b27f4516eeee30ab89ac697
SSDEEP

768:AMfeA/k1UVLDukn8iBQoIubhwz/7Hw63pIoUrZpQl0s3UozV:RfeA/EUVPuknNQovWw63aoEZpCzV

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

799c8b943356c72c09dfb838aed3bfba.elf

description ioc process

File opened for reading /proc/self/exe 799c8b943356c72c09dfb838aed3bfba.elf

description	ioc	process
File opened for reading	/proc/self/exe	799c8b943356c72c09dfb838aed3bfba.elf

/tmp/799c8b943356c72c09dfb838aed3bfba.elf
/tmp/799c8b943356c72c09dfb838aed3bfba.elf
1⤵
- Reads runtime system information
PID:638