mirai | 0db7cfd21fcb2e4b3c5aef14ebe7a804e5180986e3624bdfb55fb6b903ef4a41

Analysis

max time kernel
0s
max time network
149s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
10-12-2024 01:13

Target

3ffba55abeff93bf6649f8df48131f388696009aa89dfbe377b88ed01f95f116.elf
Size

26KB
MD5

44b869d718bc4073f8a204f3a2dcf315
SHA1

36e16cb343e39ace74fd00ae1a6ee6c709a9ff86
SHA256

3ffba55abeff93bf6649f8df48131f388696009aa89dfbe377b88ed01f95f116
SHA512

62d8e57ec1f2702fe69bb125bce6e1923ca1897fbc013c22b1b74c7519eafcff4c24b2b9ce7b5faf2ab99876c0f05d0c61322359530a3bbceadf7d0ca7488443
SSDEEP

768:JMKyhegCCMqfN11zqcEobtfUxYaOMT9q3UEL3K:OKy4qf7ISPawLa

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	3ffba55abeff93bf6649f8df48131f388696009aa89dfbe377b88ed01f95f116.elf

/tmp/3ffba55abeff93bf6649f8df48131f388696009aa89dfbe377b88ed01f95f116.elf
/tmp/3ffba55abeff93bf6649f8df48131f388696009aa89dfbe377b88ed01f95f116.elf
1⤵
- Reads runtime system information
PID:710