Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240226-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    08-04-2024 01:45

General

  • Target

    bdb3be3f6f0e3f73c8a2bd5df5de752a77909f2e71b546e793b10f3a344b5176.elf

  • Size

    29KB

  • MD5

    b6813c38eb617b8d9e78127ec8e69e2a

  • SHA1

    c207ccaeab4984e9d1babfef64f1fc20863e87e3

  • SHA256

    bdb3be3f6f0e3f73c8a2bd5df5de752a77909f2e71b546e793b10f3a344b5176

  • SHA512

    54bfc932f861fdddb6108504edb03efe84b4b5533d3a1bcfa93d6714d9f46ed6d120a01f39bbe6efdb1f09e6ab1a9d43e2c54f9066f6df88e00d50f518e872c8

  • SSDEEP

    384:Q8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjyk1RWGVCz0NvG:FMYHb62x4ahQ3CfdwLj12W3

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/bdb3be3f6f0e3f73c8a2bd5df5de752a77909f2e71b546e793b10f3a344b5176.elf
    /tmp/bdb3be3f6f0e3f73c8a2bd5df5de752a77909f2e71b546e793b10f3a344b5176.elf
    1⤵
      PID:688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/688-1-0x00400000-0x00455d70-memory.dmp