Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240226-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    19/04/2024, 12:07

General

  • Target

    30d7cd9723a8c35e03692f23154a0d35fd8e2db816dd059b130feecdc97916ca.elf

  • Size

    40KB

  • MD5

    f946de3390cdc1ff3335c5f08ac84191

  • SHA1

    c28b8e08755cef21e59ffa147a93804a370d84a5

  • SHA256

    30d7cd9723a8c35e03692f23154a0d35fd8e2db816dd059b130feecdc97916ca

  • SHA512

    62e7411f6636fcadd5527180ea9b636fbf2d3c4fa6d47a7eb9e73c60929803c35fa6d48b203d1753abd89d522e4ae100a50bd42f180f8f1cc2197dc4cef3faaa

  • SSDEEP

    768:vkJ56p6b4bQr79+E2g6S7xUZ3tgYISdwFQY9JetC8dtsyjM1UVq3Uirbv:C4p6b4c30E2m7xUfgidXI3R1Uw

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

KYTON

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/30d7cd9723a8c35e03692f23154a0d35fd8e2db816dd059b130feecdc97916ca.elf
    /tmp/30d7cd9723a8c35e03692f23154a0d35fd8e2db816dd059b130feecdc97916ca.elf
    1⤵
    • Reads runtime system information
    PID:656

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads