Analysis

  • max time kernel
    0s
  • max time network
    129s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20240523-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    08/12/2024, 13:11

General

  • Target

    sora.x86_64.elf

  • Size

    28KB

  • MD5

    a214c52a45037a3c224a20b4a5d753c2

  • SHA1

    246521f2fe92ace81508bcd74c6628dabdf3d2b9

  • SHA256

    d445eb79f7db5ee554f905cf924861c51e431d32ef13834fbca9dbf6ed0c093a

  • SHA512

    74a4de2ec969ef78b9b9f6d16ca0bd4af8156ab85f523bb5e96e4f53412932225ea881281299983851b460d14e1ff456d3d5c46acaf9c35a5c0808b6326da713

  • SSDEEP

    768:CYSoXdJZgicCHD+C98MP7L1YVPb2XH2Hi8vSx0sX:CYJdJZuCj+CiE7L1APbaH2C5tX

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/sora.x86_64.elf
    /tmp/sora.x86_64.elf
    1⤵
      PID:2464

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads