mirai | 7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
09/12/2024, 02:30

Target

7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49.elf
Size

27KB
MD5

4ce8188c1bfb5447b88292bee3ed9968
SHA1

9e2a488743deb35405755393d067ea74ce73fcb2
SHA256

7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49
SHA512

0758495a7fcbe0d045d9ae79dbfab9d60251253ac8628b7fbd9bd6e8d9df4100f273aa8f3c28bef93c66b9cd97e90c9ec4d958723cfb24444d05c5d992237489
SSDEEP

384:AOt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEPe7hymdGUop5hy:AWsoTAZ3alkXLvFh8nNEP8s3UozM

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49.elf

/tmp/7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49.elf
/tmp/7eeba67394f78b02fd39e95ef15887452ff5d189f4e35ca720184fa9f9535a49.elf
1⤵
- Reads runtime system information
PID:658