mirai | 4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
09-07-2024 01:19

Target

4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a.elf
Size

35KB
MD5

060a7b766e2e6ee3fba4ef915ace24a5
SHA1

dbba37274999405052303bceaa18d9b58e0b9a3d
SHA256

4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a
SHA512

038f3b256b092958c0760f84036bd8b093655a5265dd169f8958a3c00321d9638c33a052b31035de0ee71aee6b232348b44892354425932ed872d728479d59dd
SSDEEP

384:zUkThisrZYUAl90Y+j3eHvA7XVSxWSdz7C6anc768DtDtscQFNgE5y2VuKsgmSnB:4URuPAj0Wgpv768DGNby2tlu0qMHV3UU

Score

10^/10

mirai mirai botnet

Family

mirai

Botnet

MIRAI

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a.elf

/tmp/4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a.elf
/tmp/4c1cb4d6ad8ed523b1c6cf65cee9b7370103e58007cd0fb17f23ad1cb7bcd80a.elf
1⤵
- Reads runtime system information
PID:661