mirai | 4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea

Analysis

max time kernel
0s
max time network
143s
platform
debian-12_armhf
resource
debian12-armhf-20240729-en
resource tags

arch:armhfimage:debian12-armhf-20240729-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
31-12-2024 02:23

Target

4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea.elf
Size

26KB
MD5

fc879b49d65a43632f53350927886350
SHA1

4792765072cf4bd700dfcee4caa5205b4d54d9de
SHA256

4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea
SHA512

3647603e747868967be187f5b85478944b0b0e1fda4cfc9f63c8fe846ba353364351dd4aa20c9c1489fbe50d3a94112d97a935d1c7960b88c291cea0bccd972e
SSDEEP

768:4MKyhegCCMqfizjoNpd2vJdX6vwrK9q3UELui:PKy4qfqoeJdXWg/Lr

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea.elf

/tmp/4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea.elf
/tmp/4b150c4509958e374ce5079ef43bebecd9f6fcacf58c9ec3d874a0dc3e31f3ea.elf
1⤵
- Reads runtime system information
PID:704