Analysis

  • max time kernel
    0s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240418-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    25/09/2024, 11:51

General

  • Target

    SecuriteInfo.com.Linux.Siggen.9999.31793.28485.elf

  • Size

    36KB

  • MD5

    55b1ea8e460cf665491416d9703c57a3

  • SHA1

    5c04301349201abc61a0f024418a6432c49c4423

  • SHA256

    e8b254a8dc381088adb5da61d35374c2fa60a8df6d1ec51220ecbf20056dfb39

  • SHA512

    4cb62b3a2374465a0020e7fca2c21c7f3a613597c197e712963d66f5037a341d2534ae01298bfcfd989442a97682bc19044aeeacffd06db6d3b8b344fadc65b7

  • SSDEEP

    768:x8g6W97zg4ZHjujzqRvJKmZaNTII11IgxjEtK1TnugY2WJ:x8g/9ZHcqRvJZkJF3Dj3PYd

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

C2

wcj.yyyyvps.cn

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

Processes

  • /tmp/SecuriteInfo.com.Linux.Siggen.9999.31793.28485.elf
    /tmp/SecuriteInfo.com.Linux.Siggen.9999.31793.28485.elf
    1⤵
      PID:720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads