mirai | 9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069

Analysis

max time kernel
0s
max time network
131s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
09/12/2024, 02:37

Target

9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069.elf
Size

32KB
MD5

d649950860616f7c8561d4f904159dc4
SHA1

b141ba4b2208be36c18e06345ed54c8e633d1a13
SHA256

9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069
SHA512

2e93076d4906a588df0fbabd82470a656f69db2dea4c7813fbd5c06801a5318ce44fee6c845e9625c610f9b46cf6180771ce48e71c30ae7fa07bbe2ca0820df9
SSDEEP

768:2oiWiO031vpAPbrVWZK3XVGxm9XsJM9q3UEL5Id:2orm1vpALgUJsTL+

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069.elf

/tmp/9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069.elf
/tmp/9a2720138d31d585116e94e7d8d943e7df53a7c945fe30e40a71ec4f5d7df069.elf
1⤵
- Reads runtime system information
PID:708