Analysis

  • max time kernel
    0s
  • max time network
    143s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    13-11-2024 07:32

General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm5.elf

  • Size

    19KB

  • MD5

    155d9e40b453d75e49f896e79f2e3833

  • SHA1

    c99aa516d54116c673ed0c35ecc10e705c0798db

  • SHA256

    15a770a3c0279acbeb38ede80733fcba0f5ea9154339e223cff3929efededa8d

  • SHA512

    a9958d01b32b4b7a966d7c939317e5bea509c0ea8c84e0352f217641052bcc631f79f0153ebcc457e56ea6ad12bbf036b43aaae17966841993ac1b991a24e58d

  • SSDEEP

    384:N3me3Vg19bm2MxowbW6kn0HG0sdXIC62vnL6MybuUuIn6h7qmdGUEpiaMy8:t3Vg19bm2Wo9aHG0uFLCuUuY69q3UEL0

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    1⤵
      PID:705

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/705-1-0x00008000-0x0001a6f0-memory.dmp