mirai | 90735b2e56b14af021646ddb34844a8a12b68654dbcae26f654e2366c320000f

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240226-en
resource tags

arch:armhfimage:debian9-armhf-20240226-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-04-2024 01:51

Target

b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf
Size

50KB
MD5

e0829259442979e3de75845908832c00
SHA1

3415843193af0d7a9c1e9096d00fd0cde825603a
SHA256

b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08
SHA512

e946627b1b6fddc045727913626e3f1c6a5aa1694225b88b883c85c5d757b2d360d05498f36c16f045f7a1f0bc14b01c0757617d1c6bfcc0c69864ed572215de
SSDEEP

1536:uCoqsGR4eB3g0Vmh1IxIpC8JeLtvLuc7ckMrw:Xoqs2Twh6P8JeLtvLH7cVw

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf

description ioc process

File opened for reading /proc/self/exe b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf

description	ioc	process
File opened for reading	/proc/self/exe	b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf

/tmp/b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf
/tmp/b95a9d26776f9b96731e5627b4177645f114121450b6c8985d7c1cd53631ca08.elf
1⤵
- Reads runtime system information
PID:661