Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240226-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    24-04-2024 01:59

General

  • Target

    e46e14349d506e50bd7b0c760f86edfadbeb442f293ba6b5f41ddff0cb490caa.elf

  • Size

    39KB

  • MD5

    be5a798817330425494809c2f5304d1c

  • SHA1

    0edb3f4395ec9a4c7c3f589e330eadf1b0457425

  • SHA256

    e46e14349d506e50bd7b0c760f86edfadbeb442f293ba6b5f41ddff0cb490caa

  • SHA512

    36f5cd0a076f0df9af7d2349dc8d3bb9269672f77f6e2ce7ca9031236294481a4537aceaf6f8f01c303aa2532a0063abc0fa671e5b54d3cc7d94b8862c3ce220

  • SSDEEP

    768:sgWRsr0BsMXlZu60wyvvt8SFl8Gkfe45ZjMqxLuEjqYHvlJ1dY1:sgWugBs6Qayvv/l8GmrZjMqxL1qYPlpK

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/e46e14349d506e50bd7b0c760f86edfadbeb442f293ba6b5f41ddff0cb490caa.elf
    /tmp/e46e14349d506e50bd7b0c760f86edfadbeb442f293ba6b5f41ddff0cb490caa.elf
    1⤵
      PID:1569

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1569-1-0x0000000008048000-0x000000000805cf48-memory.dmp