Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    19-03-2024 16:29

General

  • Target

    d20b54f33b898e6872da9984d564cf29.elf

  • Size

    18KB

  • MD5

    d20b54f33b898e6872da9984d564cf29

  • SHA1

    a499d18877b42c37f52c0e46912b61a6040fdda8

  • SHA256

    f05a60d108c53b4ffaa98dda6c05a58b57848f4368bf7fac1097198c52336272

  • SHA512

    7f483cab9739ab6b6a012ebbb9dda61fb898954e0b04ea365a06f559485b030802b036d032557c67c099be95871fbae1512387bb1b3710948795e56e6dd419ec

  • SSDEEP

    384:yLrq11WrutJe/YpNvqmNT1phlwGzjBOFp5xAhidzUYm4rqL2EcciFqcJu:yLrq1TeiRqO5byPxAhYm4r8Flss

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/d20b54f33b898e6872da9984d564cf29.elf
    /tmp/d20b54f33b898e6872da9984d564cf29.elf
    1⤵
      PID:1546

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1546-1-0x0000000000400000-0x0000000000509d08-memory.dmp