Analysis
-
max time kernel
0s -
platform
debian-9_armhf -
resource
debian9-armhf-20240226-en -
resource tags
arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
26-04-2024 01:01
General
-
Target
d71a95cfb0f465f9d41ec60dba3026bba7ef58f010ac9a0eeb2ab5f0e65459fe.elf
-
Size
31KB
-
MD5
0b43ce39d8412f1fb6679937cd7b6bac
-
SHA1
df6100bab6c6c6745bd01f0594df3904ab6b785c
-
SHA256
d71a95cfb0f465f9d41ec60dba3026bba7ef58f010ac9a0eeb2ab5f0e65459fe
-
SHA512
db62d9a9940f5c5cee65c32045bf4051a4fa43567ede3e292318418985f4fe0e18f0363a15e327734630fdb70fb913039191d5c75458b94ffed3e7dd06d9e5c2
-
SSDEEP
384:rSBehsL5wFgC4Urp3VvZhUzaAfVGbrc2/pkTNW7CQRkPgosmkyCizUs1iMXhymdl:ukh3G0p3VhUHqvKT4Fc9prXs3UozRG
Malware Config
Extracted
Family
mirai
Botnet
SORA
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
d71a95cfb0f465f9d41ec60dba3026bba7ef58f010ac9a0eeb2ab5f0e65459fe.elfdescription ioc process File opened for reading /proc/self/exe d71a95cfb0f465f9d41ec60dba3026bba7ef58f010ac9a0eeb2ab5f0e65459fe.elf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/655-1-0x00008000-0x000267cc-memory.dmp