mirai | 66ce05fe2346226331c53a6b5a998897394a612d3614a0162c057035e9b0441b

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
17-03-2024 02:47

Target

a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf
Size

28KB
MD5

799c8b943356c72c09dfb838aed3bfba
SHA1

e9b0f605c82b58c9cb13709f5b02d059392b7c68
SHA256

a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6
SHA512

b348fe467e092bd84aa2a09ae76e64e80f314b94d52435d79129c3b553236dc0586b7d260b5158642df0ae125287519039ca64710b27f4516eeee30ab89ac697
SSDEEP

768:AMfeA/k1UVLDukn8iBQoIubhwz/7Hw63pIoUrZpQl0s3UozV:RfeA/EUVPuknNQovWw63aoEZpCzV

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf

description ioc process

File opened for reading /proc/self/exe a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf

description	ioc	process
File opened for reading	/proc/self/exe	a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf

/tmp/a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf
/tmp/a0fa9ea841e1da341b5ab46813bba477308093a363b2d147b13de697fd8a06e6.elf
1⤵
- Reads runtime system information
PID:639