Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240226-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    18-03-2024 02:31

General

  • Target

    db49b95c6ac055e4d7116cee636600666f744b6123483fb1c8bdd97930dc9fdb.elf

  • Size

    29KB

  • MD5

    4bee7c8535bf84541649d920f747cdef

  • SHA1

    94961697d623d190061ac46fbe2142b01c2aecf6

  • SHA256

    db49b95c6ac055e4d7116cee636600666f744b6123483fb1c8bdd97930dc9fdb

  • SHA512

    57ec0f7619ef3f93a1d9c7c26b54f545ba1ea015e8e1dad094ffcec5258bce5d70afc9e4681ebab8759ee73b803dc83d184572a407c812e8c9aee3201e727d2e

  • SSDEEP

    384:t8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjcJbZ6GRWGVCz0NvO:KMYHb62x4ahQ3CfdwLjBlJWP

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/db49b95c6ac055e4d7116cee636600666f744b6123483fb1c8bdd97930dc9fdb.elf
    /tmp/db49b95c6ac055e4d7116cee636600666f744b6123483fb1c8bdd97930dc9fdb.elf
    1⤵
      PID:709

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/709-1-0x00400000-0x00455d70-memory.dmp