Analysis

  • max time kernel
    0s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240226-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    24-04-2024 01:56

General

  • Target

    d479a464a393ab67c5e66b2365979fa5cc2eae4a85508f22059d75000bb0171a.elf

  • Size

    42KB

  • MD5

    c1b85e22e2c688c0bd205936b9d7ea4c

  • SHA1

    567e7caffc382043422f45a169739616c85a42b5

  • SHA256

    d479a464a393ab67c5e66b2365979fa5cc2eae4a85508f22059d75000bb0171a

  • SHA512

    cce4a5fbaf37b1745fdd67eff46290c052cdd45530154a78becf3e313d757fc7ef9de2576d0773ff569f661633c7ba3a3b15a5801849f21c6b4253893e6f5b6a

  • SSDEEP

    768:+58rMTrTtN+pnJwGJ8cD/doKBb4Gy8gDP0FtCk++hJgGlzDpbuR1JRK6aMl/:LMnTLgbJLoKWxbn8VJu+O/

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/d479a464a393ab67c5e66b2365979fa5cc2eae4a85508f22059d75000bb0171a.elf
    /tmp/d479a464a393ab67c5e66b2365979fa5cc2eae4a85508f22059d75000bb0171a.elf
    1⤵
      PID:704

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/704-1-0x00400000-0x0042dc40-memory.dmp