mirai | 6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829

Analysis

max time kernel
0s
max time network
146s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
04/07/2024, 01:32

Target
6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829.elf
Size 42KB
Sample240704-byd4tayfnd
SHA256 6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829
MD5 e0912be29026874e28bc0605d237b0fb
SHA1 30a510b82a089e3b50be37728aeea20a400c09c8
SHA512 814a2c8db3a55946fa72d95e4e807a0901d1c5256e0e8e378d14fdb34f07b10b5357736210e85178ac4e670cb4e6a4feb6ab105e80950ea79a1859d33719e08f
SSDEEP 768:+ZOBfXT2BJI9NuGm5O/YrCVm7N3l4pQSJdhzvOP+4XZMruYpq3UIrm:+CTzNuFK4SmZ3cQ8O2sKruYGa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

mirai mirai botnet

Family

Botnet

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829.elf

/tmp/6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829.elf
/tmp/6883fc5ce9be400644fdea18237ade27b964261a5c7df74a2788ff8287087829.elf
1⤵
- Reads runtime system information
PID:704