mirai | 4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-12-2024 02:09

Target

4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf
Size

26KB
MD5

8eb388579e8fb208b039ee236bdb286b
SHA1

3bc60667d62de3a74f6107c552dd22ff36e98f63
SHA256

4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541
SHA512

35c78c618f328c912a227e1f5dbb692fe12cc2e6f40fac72444b343adb7cb969dbc20bbaf3c052aee812ee7d42b826170bb84f996450bdf003bcc4912a1a68d0
SSDEEP

768:eMKyhegCCMqfizjoNpd2vJdX6vwr+p9q3UELuC:NKy4qfqoeJdXWg+cLf

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf

/tmp/4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf
/tmp/4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf
1⤵
- Reads runtime system information
PID:651