Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    09/11/2024, 03:46

General

  • Target
    d9f1f5b96f2c4590c7bf881496dc8fe1f4e0575c93b746ba36064e9478bcb85c.elf
  • Size 20KB
  • Sample241109-ebxt7awmcv
  • SHA256 d9f1f5b96f2c4590c7bf881496dc8fe1f4e0575c93b746ba36064e9478bcb85c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • mirai

Botnet
  • LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/d9f1f5b96f2c4590c7bf881496dc8fe1f4e0575c93b746ba36064e9478bcb85c.elf
    /tmp/d9f1f5b96f2c4590c7bf881496dc8fe1f4e0575c93b746ba36064e9478bcb85c.elf
    1⤵
      PID:645

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads