mirai | b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
04-11-2024 02:45

Target

b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d.elf
Size

27KB
MD5

1a1194361e3bb57da217f514e70a9824
SHA1

1010b1a78e8386a772e5c31f893ef821dfb38083
SHA256

b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d
SHA512

6c29cfb43aff779b9665a18ea7cc5e660fa6469f7721c5b39510bfb46826f53be5c2c44906149b5b244b7dc0f7ec7b15eb86d78f0cc37fb6bcd4c70b3be2a2fc
SSDEEP

384:Int/U5GlkzrF3ZaZzTUwl3FdGwvWkSMtNhrAfv8vVxFVRc7TI1eapleZuhymdGUd:It86CrF38T/l3OwvWIWfv2M7ms3Uozi

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

Processes:

b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d.elf

description	ioc	Process
File opened for reading	/proc/self/exe	b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d.elf

/tmp/b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d.elf
/tmp/b04977ee161120d88e67eec4608eea751dec194f306e4ab131d312b8587dc48d.elf
1⤵
- Reads runtime system information
PID:657