mirai | 036aabacfa7a75335314ddcb3258540b68d884def11e94c5a86bd90b95a1090a

Analysis

max time kernel
0s
max time network
152s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
15-12-2024 03:40

Target

f21c8f9c70936db362f60427c76ee42e_JaffaCakes118
Size

44KB
MD5

f21c8f9c70936db362f60427c76ee42e
SHA1

1a7ecf168296a3bf95a0c8ec99be0707bc4ce156
SHA256

036aabacfa7a75335314ddcb3258540b68d884def11e94c5a86bd90b95a1090a
SHA512

7622ccb268a870b0a788122006a8bd0b0d1e98ec39af45d7e8202e233210c51efd4dda904af42f5805247c5dfb5af10afad8318ae1144fcd0ef9afbedf2b6cf0
SSDEEP

768:ITK7y1XGO1LCNgukEkvwtqPnH7u83nc0iFgY9q3UELWt/iw+kvBGg6+fE:q12O1LCNguovDPH7TcrkLWhiw+kvBGgK

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	f21c8f9c70936db362f60427c76ee42e_JaffaCakes118

/tmp/f21c8f9c70936db362f60427c76ee42e_JaffaCakes118
/tmp/f21c8f9c70936db362f60427c76ee42e_JaffaCakes118
1⤵
- Reads runtime system information
PID:711