mirai | 2b5dd8dcbc873f04daab7377ac7e4be8b4346c639f26445be287326b7be0b7a1

Analysis

max time kernel
0s
max time network
128s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
08-04-2024 08:51

Target

52264a1f1a0f6fdebd70588e8f929a29.elf
Size

35KB
MD5

52264a1f1a0f6fdebd70588e8f929a29
SHA1

fcbffc4173afb262dc16e9743c82176c997b683a
SHA256

2b5dd8dcbc873f04daab7377ac7e4be8b4346c639f26445be287326b7be0b7a1
SHA512

04ccb012531b85320016e9fbe1006bb91bbbb9d6bba2f3d6f4c1fb89f52a0c551fc565c951e9ae20b632fd3a2975b096c35f3eb1bafbede96037f7fe9f10b51f
SSDEEP

768:KTWzq4Bf3XXbgxksLGrZdKexMW/KJ7yVa8xida04xthTYwtyz/9Rv9sPVI7:9nLgxlCNd7MhvCRT9M/FuV+

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

52264a1f1a0f6fdebd70588e8f929a29.elf

description ioc process

File opened for reading /proc/self/exe 52264a1f1a0f6fdebd70588e8f929a29.elf

description	ioc	process
File opened for reading	/proc/self/exe	52264a1f1a0f6fdebd70588e8f929a29.elf

/tmp/52264a1f1a0f6fdebd70588e8f929a29.elf
/tmp/52264a1f1a0f6fdebd70588e8f929a29.elf
1⤵
- Reads runtime system information
PID:1563