mirai | 3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
18-03-2024 02:07

Target

3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf
Size

26KB
MD5

1c28f9bbae11f59936fcaedb63cac902
SHA1

6be2b8f6e62eb6d54c607c0a9696cc14fd21ca4e
SHA256

3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65
SHA512

832dd8d0cc263afabf08990825d7ae76403ee191f80dcdc67df23a0685ad3f8f8bd43d61d2a1017d3fd597f87dbe87a7798e14a5c2773b2ac65362f4da1c7eba
SSDEEP

768:AjKX9vt6GqA3Q0jzV7EUyUq9niLs3UozB:AjqtBqoB7EUBA3zB

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf

description ioc process

File opened for reading /proc/self/exe 3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf

description	ioc	process
File opened for reading	/proc/self/exe	3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf

/tmp/3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf
/tmp/3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65.elf
1⤵
- Reads runtime system information
PID:642