mirai | b976e26865ea75a8fa57b3d4fe469ed8caa941cd0a0c39db84806aaf2e370302

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30-12-2024 01:00

Target

6a02384b1bd02d623d5b76769855866050deec0139341a10a021ba6abb375126.elf
Size

26KB
MD5

01019a50378053cbcc70625f00c14027
SHA1

4549493a5bcc8efa9bf4cf4cd430f7a3c3cf8b54
SHA256

6a02384b1bd02d623d5b76769855866050deec0139341a10a021ba6abb375126
SHA512

901cb171296831910720d6b13080e379f0dd2220601ebc488724cdc8e1243488cd10806123e43d2b3fa2cb1bdea2cd43fe680306802c3ceb466ec0b743616954
SSDEEP

768:4MKyhegCCMqfizjoNpd2vJdX6vwr4+/9q3UELuc:PKy4qfqoeJdXWg4+uL5

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	6a02384b1bd02d623d5b76769855866050deec0139341a10a021ba6abb375126.elf

/tmp/6a02384b1bd02d623d5b76769855866050deec0139341a10a021ba6abb375126.elf
/tmp/6a02384b1bd02d623d5b76769855866050deec0139341a10a021ba6abb375126.elf
1⤵
- Reads runtime system information
PID:656