mirai | 49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19-12-2024 02:46

Target

49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be.elf
Size

26KB
MD5

8f5404967b32e6ee636ffe931b401cf3
SHA1

856eebf0d696bc1d82535ce6c42510d2ab441dde
SHA256

49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be
SHA512

1a52287b2215042fba728a3556be7f3f60e47f6ac2ad99cf9f7f85b8813e22813236f0e91879554a8ae6547d2e59d6a2800c3b3fe613448cb37d14955bf7d2d6
SSDEEP

768:4MKyhegCCMqfizjoNpd2vJdX6vwrR9q3UELui:PKy4qfqoeJdXWgEL3

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be.elf

/tmp/49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be.elf
/tmp/49d4618d1fda32e2d3ed214a581b4c2ada51de33797471345b51da252f9462be.elf
1⤵
- Reads runtime system information
PID:645