mirai | 84debff5b79f44ebe7a79e47ca03a57e949dd011877921b715e6186b1fa72156

Analysis

max time kernel
0s
max time network
153s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
06/12/2024, 01:57

Target

ae2d6def3a73b1258154f2f569182636a317e32212e8e4516c3a8989e8a15d3c.elf
Size

51KB
MD5

e4bf07fa6c9179f69e3fb1f77c2158cd
SHA1

a4c25f15ec2bf42eb924b622db65a96b476f5060
SHA256

ae2d6def3a73b1258154f2f569182636a317e32212e8e4516c3a8989e8a15d3c
SHA512

7245e4945dc311081f5f71ed5b797835b8307a75b97e293588c7092899dc20a722c4d332b9925db352fe06a184673fa3b022590631b09211628b2bf368b1aabc
SSDEEP

1536:M9O/ZMAXIxNUk0CcLcPqF1aBexo4opKZbR:M9O/ZNKy5LGqFUFE

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	ae2d6def3a73b1258154f2f569182636a317e32212e8e4516c3a8989e8a15d3c.elf

/tmp/ae2d6def3a73b1258154f2f569182636a317e32212e8e4516c3a8989e8a15d3c.elf
/tmp/ae2d6def3a73b1258154f2f569182636a317e32212e8e4516c3a8989e8a15d3c.elf
1⤵
- Reads runtime system information
PID:707