mirai | a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30-12-2024 02:33

Target

a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941.elf
Size

30KB
MD5

48929eb2029d225af29e9260afef4d48
SHA1

7f31056092d234bd93ad548295f216d7a595dd46
SHA256

a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941
SHA512

d8505c66a67ae859611393c5bac9e81e8c9d3eedee504d171a64a71736fecbeb6ba86ef611a69e273d581f7fea1d0b3d2bdc04354261327ebc00247ce845fa80
SSDEEP

768:rltjJ4mQr5XGZmfXeQkvHp9wDPzd5jZ3IIwm47W3UoX:r32mQxGZwkvnwvW64Y

Score

10^/10

Family

mirai

Botnet

UNSTABLE

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941.elf

/tmp/a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941.elf
/tmp/a0a1b54b33f2b9adb1a6c9309035c27c4db00823d643ab9eafc1b3d5f74ff941.elf
1⤵
- Reads runtime system information
PID:666