mirai | e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5

Analysis

max time kernel
0s
max time network
145s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
19-12-2024 04:17

Target

e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5.elf
Size

31KB
MD5

6ecae6057f4f55e8facfce9b5ced5006
SHA1

ba78b0f7c75d6e49d1b8e319ea05555912edd628
SHA256

e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5
SHA512

caa2b5ad0bb6b640d1caa41f041bbad6f6fafe9de6b88d2726ff570f07129aed4d449432373b19ccbe2520940a97aa082ce19f783415b40e7a67dd556959e96e
SSDEEP

768:oqo1hew6GHEU8l2oFnM89vooHheD9q3UEL6M:+h76ZU8lbnRooBeCLN

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5.elf

/tmp/e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5.elf
/tmp/e065a481e2b8596213038b72b78170d1a790a4e04ff4933b74b5972676937cd5.elf
1⤵
- Reads runtime system information
PID:707