Analysis
-
max time kernel
0s -
max time network
149s -
platform
debian-12_armhf -
resource
debian12-armhf-20240418-en -
resource tags
-
submitted
27-12-2024 01:33
General
-
Target
4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf
-
Size
26KB
-
MD5
8eb388579e8fb208b039ee236bdb286b
-
SHA1
3bc60667d62de3a74f6107c552dd22ff36e98f63
-
SHA256
4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541
-
SHA512
35c78c618f328c912a227e1f5dbb692fe12cc2e6f40fac72444b343adb7cb969dbc20bbaf3c052aee812ee7d42b826170bb84f996450bdf003bcc4912a1a68d0
-
SSDEEP
768:eMKyhegCCMqfizjoNpd2vJdX6vwr+p9q3UELuC:NKy4qfqoeJdXWg+cLf
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Mirai family
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf/tmp/4dbe127e4408ddc5816d8756ee8b4b02646af7781798db935d8e2008f3949541.elf1⤵
- Reads runtime system information