mirai | bbb7390dbc8aa7ccca7b58f2a6ae8f9f598749b3e247120677d5df775a8e97f2

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
17-03-2024 08:30

Target

50d5d2cabbb81f67f13b419dd0589be2.elf
Size

50KB
MD5

50d5d2cabbb81f67f13b419dd0589be2
SHA1

52aba3358b6cd9f6adf496eec85c26ebb8086021
SHA256

bbb7390dbc8aa7ccca7b58f2a6ae8f9f598749b3e247120677d5df775a8e97f2
SHA512

53654193b73614bb181ba589a98ccff6a526bcc2b8082611e00a3f960b4e81a5b08e8ba7fcdd66cf7ccb6cb10dc463be04f59eca7331f5a844e25debd78e393f
SSDEEP

768:JfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbMAgI9q3UEL2qEK5J6OAsNTGjf2tl8X6:KPtQjiZVcykHRDMAgxL15J6RN2tA6

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

50d5d2cabbb81f67f13b419dd0589be2.elf

description ioc process

File opened for reading /proc/self/exe 50d5d2cabbb81f67f13b419dd0589be2.elf

description	ioc	process
File opened for reading	/proc/self/exe	50d5d2cabbb81f67f13b419dd0589be2.elf

/tmp/50d5d2cabbb81f67f13b419dd0589be2.elf
/tmp/50d5d2cabbb81f67f13b419dd0589be2.elf
1⤵
- Reads runtime system information
PID:660