mirai | dfcc1efbbf3745ea3f0037b89e7880dc390470e2a5924d88e5ade508587b64de

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
18-04-2024 05:04

Target

91d23ccd3772617cabf60cb602f69e4a.elf
Size

50KB
MD5

91d23ccd3772617cabf60cb602f69e4a
SHA1

d120d796ecf0950917c2db76bc9920578327bca1
SHA256

dfcc1efbbf3745ea3f0037b89e7880dc390470e2a5924d88e5ade508587b64de
SHA512

7c326f8eafedd6a2d543b53472220701375e65ee096de16313b8e41ba61d580ddb51f28c2b2688e0ae1fe48d54c948937b13aab95236ce52baf40d00a717933b
SSDEEP

768:vfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbMK59q3UELUdcK51y1qnc7XOOyL:0PtQjiZVcykHRDMbLUSAnc71y

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

91d23ccd3772617cabf60cb602f69e4a.elf

description ioc process

File opened for reading /proc/self/exe 91d23ccd3772617cabf60cb602f69e4a.elf

description	ioc	process
File opened for reading	/proc/self/exe	91d23ccd3772617cabf60cb602f69e4a.elf

/tmp/91d23ccd3772617cabf60cb602f69e4a.elf
/tmp/91d23ccd3772617cabf60cb602f69e4a.elf
1⤵
- Reads runtime system information
PID:643