mirai | 212f43117ef3a0422174bbd228fd98daea2d34dde24ca3a4c381bc432063c730

Analysis

max time kernel
0s
max time network
145s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
22/07/2024, 22:27

Target
bc921f1a87abba3dabefc28b5a59a9ae.elf
Size 28KB
Sample240722-2c3hdssdpn
SHA256 212f43117ef3a0422174bbd228fd98daea2d34dde24ca3a4c381bc432063c730
MD5 bc921f1a87abba3dabefc28b5a59a9ae
SHA1 cfcb8f98df1c36d8008187298046c16087f87a39
SHA512 c7957bdb09f82ae219d1d2c8aef5bf21c2a53e1c851cefcffa2a366a46edbaef0e45146063d40be569a488b1169cc38271f3eecb55495395b94b893aa023220f
SSDEEP 768:GyYDPF7UgkrBGipgP40ECDLJXNOhBr6nBw9q3UELQa:nYbRUBwif8lX0hBr6nB5LP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

mirai sora botnet

Family

Botnet

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	bc921f1a87abba3dabefc28b5a59a9ae.elf

/tmp/bc921f1a87abba3dabefc28b5a59a9ae.elf
/tmp/bc921f1a87abba3dabefc28b5a59a9ae.elf
1⤵
- Reads runtime system information
PID:707