mirai | 5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f

Analysis

max time kernel
0s
max time network
146s
platform
debian-12_armhf
resource
debian12-armhf-20240729-en
resource tags

arch:armhfimage:debian12-armhf-20240729-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
01-11-2024 03:56

Target

5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf
Size

26KB
MD5

1881a966a82698df97c1d6998a3ad1b5
SHA1

1aedbdde5d30da627f4f2a201f0160a41593ac27
SHA256

5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f
SHA512

fef18a886d3167d7b304d45fa5a375ad653636ba19b91c83c272fae87c89a38dd70e3ea0fb8fd0cb73f6e77fea87890a3eba75027e5936d73b41af490653e1d8
SSDEEP

768:H6GurUPTuFf9+q6ZGh4hcIrjtL9q3UELnL:aGyMT5Z+GcIrjsLL

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
discovery

Processes:

5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf

description ioc process

File opened for reading /proc/self/exe 5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf

description	ioc	process
File opened for reading	/proc/self/exe	5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf

/tmp/5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf
/tmp/5d68984cd448725727e407617c37f75cdfef4acba86aa64dd545ff0556a4003f.elf
1⤵
- Reads runtime system information
PID:712