Overview

overview

10

Static

static

5

h0r0zx00x.arm6.elf

debian-12-armhf

10

Analysis

  • max time kernel
    0s
  • max time network
    150s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240729-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    06-11-2024 13:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    h0r0zx00x.arm6.elf

  • Size

    35KB

  • MD5

    217ace48acec8d751712a28922d2881e

  • SHA1

    8f0dde1ee249652193692b62f0f4194d3d4de5a0

  • SHA256

    d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15

  • SHA512

    6daafdff0cae02463bc7deec4eb754aa0516e26027d6a8374ebe6334725d8ffcbb9f48fbfa2502892fcaa866f456200247f9b94646ab252c930b73ecfac60eb4

  • SSDEEP

    768:wLeHeXqzWnUBWCMqnIerktHCtYO+INbdoKwBHgk6xCWYXhYq3UIJHL:wLSzWnUcLHZ8BwBHgjM/F

Score
10/10
miraiunstablebotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/h0r0zx00x.arm6.elf
    /tmp/h0r0zx00x.arm6.elf
    1⤵
    • Reads runtime system information
    PID:703

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/703-1-0x00008000-0x0002ea18-memory.dmp

    Download