mirai | b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07-11-2024 03:06

Target

b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf
Size

27KB
MD5

f52843b3840ba240ca89be2705e9e92d
SHA1

868f21b64b062a81a4bdcce5e76024ebbffdb06a
SHA256

b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8
SHA512

98b6f6d33c49ce1a01fe2366e02048148278bf1cfaf687a22071848c0d6898822793cd62cc7ebf57109defad7bd801afc373148108343dd83f9e85204e8980e8
SSDEEP

768:GWMGzKOjZZ0J/u6hOSy5LXQvuARNbGCTz3Ubl:GGzKOjZZ2LCgvu4bJQ

Score

10^/10

Family

mirai

Botnet

UNSTABLE

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
discovery

Processes:

b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf

description ioc process

File opened for reading /proc/self/exe b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf

description	ioc	process
File opened for reading	/proc/self/exe	b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf

/tmp/b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf
/tmp/b60b9383682a5a6e0b1d800b5b46c60084bab8b878de87fd8ea7817c159a0ae8.elf
1⤵
- Reads runtime system information
PID:656