mirai | f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
15-11-2024 03:11

Target

f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf
Size

50KB
MD5

1fd1d4c09b1c1026184e73fe59e83d8b
SHA1

4eaadfe62344676092d4d7917ddaab5b99643f0d
SHA256

f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea
SHA512

cf1926eb9aad95a5053fb8ecd5c45272abba08a37aaf9b3550d4afd144986cf2d55624902f1dbb8a19c0af2268932652996c320732a2c9027ac56d98a4dec0e6
SSDEEP

1536:uCoqsGR4eB3g0Vmh1IxIpC8JjL9VE8amFZP7R3Q:Xoqs2Twh6P8JjLJ9ZP7R3Q

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
discovery

Processes:

f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf

description ioc process

File opened for reading /proc/self/exe f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf

description	ioc	process
File opened for reading	/proc/self/exe	f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf

/tmp/f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf
/tmp/f61704e951df85cef6efedaf3652904fbc1bdc8a6d59ea5fc31dcf57c355b2ea.elf
1⤵
- Reads runtime system information
PID:648