Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240729-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    05/09/2024, 09:35

General

  • Target

    3bcfc04e63b6d9007ce4c63b9334ce56b333dfc2f54997b311d698fde4a3934a.elf

  • Size

    62KB

  • MD5

    600a199e59720359982e6cc0e70d5403

  • SHA1

    2b92c7bf900ab62da845e107287c823171cc31ae

  • SHA256

    3bcfc04e63b6d9007ce4c63b9334ce56b333dfc2f54997b311d698fde4a3934a

  • SHA512

    2228eceb4492ea00d9d0ee9f2d8fb078ddae17c9d22396fb33de4273994bb630a3a5ed944b380ee68c32623e18cfe176f90bb58f17acf274e8a935e27df73d49

  • SSDEEP

    1536:5TNndCCmD0xoSOWTKItz1Lgkhv2fA5ERrXRx:5TNndS0zOWTK85gsb5ERjRx

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Deletes itself 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/3bcfc04e63b6d9007ce4c63b9334ce56b333dfc2f54997b311d698fde4a3934a.elf
    /tmp/3bcfc04e63b6d9007ce4c63b9334ce56b333dfc2f54997b311d698fde4a3934a.elf
    1⤵
    • Deletes itself
    • Reads runtime system information
    PID:703

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads