mirai | 10982d45e150cfb7ae54e98ae5aeff25de0bb41be8c9edc4d80cd1e93002f35e

Analysis

max time kernel
0s
max time network
181s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
20-10-2024 19:00

Target

63d0b84c15cf58a9d40d2f0000e2d68c_JaffaCakes118
Size

33KB
MD5

63d0b84c15cf58a9d40d2f0000e2d68c
SHA1

55a4cd1b39febc8a28dd50c843c8dbb9f83da2a7
SHA256

10982d45e150cfb7ae54e98ae5aeff25de0bb41be8c9edc4d80cd1e93002f35e
SHA512

07c9497dedc25ebdcb918819a9fae6fe759ceb7071588523f5896630297649c1f71f2b90c7fbbf4da33b69e82230f5ddf32bf4ab13bb436a16495b31eacb6420
SSDEEP

768:jXS9WyHPiGfbRIVenWvAg/pbHK5JFE3XORpW9q3UELGEh:ji9WyHPiGucn0AspGW3+rL3

Score

10^/10

Family

mirai

Botnet

UNSTABLE

cnc.astrovpn.xyz

scan.astrovpn.xyz

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	63d0b84c15cf58a9d40d2f0000e2d68c_JaffaCakes118

/tmp/63d0b84c15cf58a9d40d2f0000e2d68c_JaffaCakes118
/tmp/63d0b84c15cf58a9d40d2f0000e2d68c_JaffaCakes118
1⤵
- Reads runtime system information
PID:703