mirai | 6b268fdfa1dd4342945b514808ebf7ca5d7e7e1f88230fdc1f04acd8c977f868

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
31-03-2024 16:28

Target

5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118
Size

37KB
MD5

5873efad3688d67c4d4f8c4276ed948a
SHA1

acead029bf79ad57ed0455b574e826ce25280ef4
SHA256

6b268fdfa1dd4342945b514808ebf7ca5d7e7e1f88230fdc1f04acd8c977f868
SHA512

8a485269247bf2462a679deac76e935bb54ed0aa23ff28a5cb4d9dac2740fda25edf9572ed0a81502fded2d2c4b0321aad2b6c3bce80768d0ccfad2026e3bb81
SSDEEP

768:vS0Gy6TA6niecEu/RhZHIEo4uHKRRv3QJ1WD7EySEkah9q3UELmk:vzGg6nF8KEo/25AcvtSdnLF

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118

description ioc process

File opened for reading /proc/self/exe 5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118

description	ioc	process
File opened for reading	/proc/self/exe	5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118

/tmp/5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118
/tmp/5873efad3688d67c4d4f8c4276ed948a_JaffaCakes118
1⤵
- Reads runtime system information
PID:665