mirai | cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291

Analysis

max time kernel
0s
max time network
153s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
31-12-2024 02:56

Target

cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291.elf
Size

34KB
MD5

2abe2bee959156b5e9ac16679b0bab05
SHA1

55d8afb8b034ae21acf16000ff87f1ad709ee65e
SHA256

cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291
SHA512

2abd253408f993aea361586a3fa06cb4adb6657e5903957d8796f0262af2e2315601bd723ea6234442d808505241f5ce13663fa34771055574bf085f44bd65c4
SSDEEP

768:DqeNODGNbHyUAXhJLy6VUuI+vzpq5/mXV9q3UELli:O+1bHSXX/vA5Lo

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291.elf

/tmp/cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291.elf
/tmp/cafec8e0f70d52b3f2a5a84297304906ce021200936b3e2caf25e20f8715a291.elf
1⤵
- Reads runtime system information
PID:712