mirai | 47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08/12/2024, 02:16

Target

47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829.elf
Size

42KB
MD5

08a6d5040156029c6ce0d7d176fbafb2
SHA1

48bbd68fc231478b69d99a023eaab17136535609
SHA256

47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829
SHA512

a7754916f4dcd9d1a28a2c1cd42ae99d1b1721010f2a9303eb7685fc7b74f99d4c06d32577fc9c11445d842236500927751102c9e353e93ecae70b5b5b3938f0
SSDEEP

768:ndYdBGQt+LRcOUcF38FYYO+4Xbhb7Vj7G1cpCqNIqNkfbtq8ENKJFnuJPk9q3UEx:ndYrMNcOUcFhXh3Vjq2pxp6DiNFZNLF

Score

10^/10

Family

mirai

Botnet

KURA

huyhoang.ddns.net

botnet.nsohunter.com

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829.elf

/tmp/47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829.elf
/tmp/47aaf1df7389c76275034ebc5a6511714e8b99469132e7f17a74bf38d4745829.elf
1⤵
- Reads runtime system information
PID:674