Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    02/08/2024, 11:57

General

  • Target

    0469f4cad9624c06698413bd1ef91a888e74888552ea4e2ce36e71f5edabdbef.elf

  • Size

    33KB

  • MD5

    c6af7518d435a77f78574f603447ca12

  • SHA1

    00eedcd8c5fa4819d98a227941358f4efcbb9fd5

  • SHA256

    0469f4cad9624c06698413bd1ef91a888e74888552ea4e2ce36e71f5edabdbef

  • SHA512

    6531a1adda5cce41288c066e781ee387e5ec5eaa80b579e4d36bc589f406d13a76936566ca41adb9156ac6d8f1802cfb7ed0d4a0fcebf66b120042513d962291

  • SSDEEP

    768:/gAnHWVzw8tkQJckE0/WYcqBUbBZUqY9COfNT1Ks3Uozc2:/geWVdtHjHw6+fY9CENTtzz

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/0469f4cad9624c06698413bd1ef91a888e74888552ea4e2ce36e71f5edabdbef.elf
    /tmp/0469f4cad9624c06698413bd1ef91a888e74888552ea4e2ce36e71f5edabdbef.elf
    1⤵
    • Reads runtime system information
    PID:660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads