mirai | 822d941dd215fce37a3ecab49c3f2d02cc0372eb518a3bf361e964792e08a9c2

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
09-07-2024 18:20

Target

SecuriteInfo.com.Linux.Siggen.9999.7681.11744.elf
Size

31KB
MD5

ae7dd7410309357036ec61077a5b5496
SHA1

fe023be9b48c06fddf06d463455e35b6e8eee667
SHA256

822d941dd215fce37a3ecab49c3f2d02cc0372eb518a3bf361e964792e08a9c2
SHA512

8d5aefcee7cd5f222e30ef465c885bde8cb10122bfcd87a1035ef18c35fbacdf43746dafe237f80fe13c0c64a104f623a67c43dffb1606911866204e43fa78ed
SSDEEP

768:Pd0ByevXvui/ga5KnQQC/KI4PljD31Koy3/v7eJUvidqBGJDZjbgs3Uozxm:F0p2iEnAKrPNYoWvQsidqoJD9Vzxm

Score

10^/10

mirai sora botnet

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	SecuriteInfo.com.Linux.Siggen.9999.7681.11744.elf

/tmp/SecuriteInfo.com.Linux.Siggen.9999.7681.11744.elf
/tmp/SecuriteInfo.com.Linux.Siggen.9999.7681.11744.elf
1⤵
- Reads runtime system information
PID:642