Analysis

  • max time kernel
    0s
  • max time network
    148s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    03/12/2024, 03:03

General

  • Target

    d0f491d00b41ec36a8c1484f6f2106f410842763a604aa7bbc5e112dbfca3591.elf

  • Size

    16KB

  • MD5

    b2f96d861442b5dc975c97d43e680f98

  • SHA1

    a9e0f4884a3a9ab179dc535c3de3cd8c1b4f71cc

  • SHA256

    d0f491d00b41ec36a8c1484f6f2106f410842763a604aa7bbc5e112dbfca3591

  • SHA512

    256f4a163b44fac1958efecada1eb76cec16c9e47783cb47d78e3a736956d15c5a7374094a1a928d4495829a319919b61a95f42cb1ae34529a63279929b69c27

  • SSDEEP

    384:ji+Y5qVPgNXzYm6UN+m3UUJoujrBpFzh7qmdGUEpia6:dZVP6JZjWMz9q3UEL6

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/d0f491d00b41ec36a8c1484f6f2106f410842763a604aa7bbc5e112dbfca3591.elf
    /tmp/d0f491d00b41ec36a8c1484f6f2106f410842763a604aa7bbc5e112dbfca3591.elf
    1⤵
      PID:707

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads