Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240226-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19-04-2024 01:30

General

  • Target

    69875edcd2f32d006b5c3a2c73fec2c7672632a603b6b0de5c5c18c748aa8b0d.elf

  • Size

    43KB

  • MD5

    435242e313fd57bac10a862e7477bc07

  • SHA1

    b2f399831bc32ecafe89f3298808167141c76042

  • SHA256

    69875edcd2f32d006b5c3a2c73fec2c7672632a603b6b0de5c5c18c748aa8b0d

  • SHA512

    a671971caff955344abbbc8ca04d7778a281131e21164f100b877d87b3eac936eb2608d7bf9959cac8f899c71f3099ffbde7a0f14ce8bf2e6361051f4601228c

  • SSDEEP

    768:dqCDkRxeGVeVke8QCTBWl4XMYSGl2U2D04/TMrWNedxaKQX:UmGTBM4uGUdTVUxFg

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/69875edcd2f32d006b5c3a2c73fec2c7672632a603b6b0de5c5c18c748aa8b0d.elf
    /tmp/69875edcd2f32d006b5c3a2c73fec2c7672632a603b6b0de5c5c18c748aa8b0d.elf
    1⤵
      PID:703

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/703-1-0x00400000-0x0042ec40-memory.dmp