Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240418-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    14/11/2024, 02:08

General

  • Target

    15a770a3c0279acbeb38ede80733fcba0f5ea9154339e223cff3929efededa8d.elf

  • Size

    19KB

  • MD5

    155d9e40b453d75e49f896e79f2e3833

  • SHA1

    c99aa516d54116c673ed0c35ecc10e705c0798db

  • SHA256

    15a770a3c0279acbeb38ede80733fcba0f5ea9154339e223cff3929efededa8d

  • SHA512

    a9958d01b32b4b7a966d7c939317e5bea509c0ea8c84e0352f217641052bcc631f79f0153ebcc457e56ea6ad12bbf036b43aaae17966841993ac1b991a24e58d

  • SSDEEP

    384:N3me3Vg19bm2MxowbW6kn0HG0sdXIC62vnL6MybuUuIn6h7qmdGUEpiaMy8:t3Vg19bm2Wo9aHG0uFLCuUuY69q3UEL0

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/15a770a3c0279acbeb38ede80733fcba0f5ea9154339e223cff3929efededa8d.elf
    /tmp/15a770a3c0279acbeb38ede80733fcba0f5ea9154339e223cff3929efededa8d.elf
    1⤵
      PID:639

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads