mirai | bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
24-04-2024 01:49

Target

bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf
Size

31KB
MD5

a5cad4481a17e94cc218010857554435
SHA1

9a7a6bd0ca4e5a426cdce046ffce363d5c11ff42
SHA256

bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3
SHA512

8bdceec0c7ae3c9a17c9967a5bf9f7ceb944b9cd0afb330715d0b57a5a6c4f2e4e4e387a019d1b4522be325bc14e8ce020023ea52046666c93a39ddc0a83273f
SSDEEP

384:uSBehsL5wFgC4Urp3VvZhUzaAfVGbrc2/pkTNW7CQRkPgosmkyCizUs1Hk8hymdR:Fkh3G0p3VhUHqvKT4Fc9pi8s3UozRK

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf

description ioc process

File opened for reading /proc/self/exe bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf

description	ioc	process
File opened for reading	/proc/self/exe	bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf

/tmp/bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf
/tmp/bed099cdf50214613f89144e00edb807760b44dad3cd3641ff0374c490eeebd3.elf
1⤵
- Reads runtime system information
PID:645