mirai | a0f7ea8c497b0488e94e36d65521c12dd5f140d3dc00362a730ea55113b6412a

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
12-04-2024 01:07

Target

1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf
Size

29KB
MD5

3d7de53d7ff5485c1ceefc9df7f9f62e
SHA1

297ee830d3d40513b97517a750aa75a7a0ce4d68
SHA256

1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df
SHA512

c531c56630227bf739c1d074bb8334fedb83678454eba28f184e595c71f322e9271e413ea5d98a19d00bf269d4a6ea7a8b746c1610dc873ba05d6b902c7c9608
SSDEEP

768:Ue1uSi6OSkQEcqXRt6V9/pH1vzmQfxX+zYH9q3UELdo:hYSiKkQEY9RH8zzYWLi

Score

10^/10

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf

description ioc process

File opened for reading /proc/self/exe 1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf

description	ioc	process
File opened for reading	/proc/self/exe	1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf

/tmp/1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf
/tmp/1338b34a07e374e10777e002817000d123f75b702a6fa47eb40a94cde6e839df.elf
1⤵
- Reads runtime system information
PID:660