mirai | 3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4

Analysis

max time kernel
0s
max time network
132s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240508-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11-06-2024 01:12

Target

3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf
Size

36KB
MD5

68707724d827cf825ca08f7f9e110c10
SHA1

578f66d86430b21000bdec276f2aa6c916a32f14
SHA256

3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4
SHA512

b71d52a8fd72b953ed7aeae853bc5905296551fbd971f863c0987957d525bfa4a33b4c9c8eb2c34c0f249277c14721203f6dd8c80122b94d79d9a5ee063fdebc
SSDEEP

768:r/Yd6WmqnzD8luoNWaJ4guHKgHs7IDZ+O23WBz2s6DVnbcuyD7Uiyqg:tInv8luoNRJ4guHKJS3qDVnouy8Zqg

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf

description ioc process

File opened for reading /proc/self/exe 3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf

description	ioc	process
File opened for reading	/proc/self/exe	3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf

/tmp/3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf
/tmp/3f783db2348675755e7e8324299a8ead5294a5e85e2347adadfba0340412f9b4.elf
1⤵
- Reads runtime system information
PID:1483