Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240226-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    02-04-2024 01:00

General

  • Target

    087421ac222e935579dfd3b7a5120451fd9d9a663d3d1872c04b6154b238c894.elf

  • Size

    29KB

  • MD5

    caa62fc5426fda5bb51dd6dcfc804b5b

  • SHA1

    c1648ab78484ea318efa729b41f0fff80772a8b3

  • SHA256

    087421ac222e935579dfd3b7a5120451fd9d9a663d3d1872c04b6154b238c894

  • SHA512

    5b6678cc985a4e180032c2ef9ecc094b22ea2c7de3ab2cc9bfa265ef444c13582bcb3183125ab1193d9f5a45ceee46ff49d5773532242f8821d8ba845b39a460

  • SSDEEP

    768:Mqa+lipfbBFUDuQZHAOrvWj6rRjrM1u2BYiQnUWsx:0bB2aQZJvWjyhL2BY7nix

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/087421ac222e935579dfd3b7a5120451fd9d9a663d3d1872c04b6154b238c894.elf
    /tmp/087421ac222e935579dfd3b7a5120451fd9d9a663d3d1872c04b6154b238c894.elf
    1⤵
      PID:698

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/698-1-0x00400000-0x00455da0-memory.dmp