mirai | d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
07-11-2024 03:18

Target

d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf
Size

35KB
MD5

217ace48acec8d751712a28922d2881e
SHA1

8f0dde1ee249652193692b62f0f4194d3d4de5a0
SHA256

d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15
SHA512

6daafdff0cae02463bc7deec4eb754aa0516e26027d6a8374ebe6334725d8ffcbb9f48fbfa2502892fcaa866f456200247f9b94646ab252c930b73ecfac60eb4
SSDEEP

768:wLeHeXqzWnUBWCMqnIerktHCtYO+INbdoKwBHgk6xCWYXhYq3UIJHL:wLSzWnUcLHZ8BwBHgjM/F

Score

10^/10

Family

mirai

Botnet

UNSTABLE

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
discovery

Processes:

d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf

description ioc process

File opened for reading /proc/self/exe d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf

description	ioc	process
File opened for reading	/proc/self/exe	d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf

/tmp/d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf
/tmp/d2c24d80419d4098ff4f8684be439f925a62c0957142f4b8e342a51febab2e15.elf
1⤵
- Reads runtime system information
PID:648