Overview

overview

10

Static

static

7

SecuriteIn...01.elf

debian-9-armhf

10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    31/08/2024, 23:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Linux.Siggen.9999.27011.25101.elf
  • Size 17KB
  • Sample240831-3vkwqsseqj
  • SHA256 0ad0c2d751b4c871b02b6acc8299e08e130a978f320c431778df40e2d86a37eb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
mirailzrdbotnet

Malware Config

Extracted

Family

  • mirai

Botnet

  • LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

Processes

  • /tmp/SecuriteInfo.com.Linux.Siggen.9999.27011.25101.elf
    /tmp/SecuriteInfo.com.Linux.Siggen.9999.27011.25101.elf
    1⤵
      PID:672

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads