Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    01-01-2025 03:23

General

  • Target

    db1013cbd2800749335b38befdead1654ba9083be8817823c75365c9202598db.elf

  • Size

    18KB

  • MD5

    c62580a8bd7eb64604d579e642c6ae29

  • SHA1

    a78b94c36f4f2f57978e08607234ef08d9fccea6

  • SHA256

    db1013cbd2800749335b38befdead1654ba9083be8817823c75365c9202598db

  • SHA512

    dfa5d0ed6e0bd69aa9f02d484a413227552429b4bf62e645c185f93d039b462533152eb7c667f47524b40de3c947daa2bd71b0bbf451e0eb6b49f90ee7ccda31

  • SSDEEP

    384:2dSP0EnPELJBIOv4WRWNlZTzuJBKnux3OyxquDXhymdGUop5h7g:2E0ePElCKANlcAnRJuDXs3Uoz9g

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/db1013cbd2800749335b38befdead1654ba9083be8817823c75365c9202598db.elf
    /tmp/db1013cbd2800749335b38befdead1654ba9083be8817823c75365c9202598db.elf
    1⤵
      PID:646

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads