Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    26-12-2024 21:05

General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm5.elf

  • Size

    19KB

  • MD5

    15ccce9d8afc582a06ec3d3ff4156f2e

  • SHA1

    c6cb37fdefc8b0e616df5729180cb2e1f5d0bcfb

  • SHA256

    b4a54c2cd6137ca011e680a05bd707e242d206d4a3ab1d341610c81a2f17a934

  • SHA512

    92c96c19ec60abe95039fa1b7c5fdd6cec7eae823c5a0cc75aa9a2330809442cf1a8890eb50f840b0bb748e6deebe49ea96d9b7b041c3aec39a545412453aa6e

  • SSDEEP

    384:d3meRngp8Bc8ZoScE5jrecZpuYdruCurs5/h7qmdGUEpiaMyO:9RngbScMjre4pHdruCuQx9q3UEL/O

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    1⤵
      PID:649

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads