Overview

overview

10

Static

static

5

z0r0.arm6.elf

debian-12-armhf

10

Analysis

  • max time kernel
    0s
  • max time network
    138s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    05/01/2025, 13:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    z0r0.arm6.elf

  • Size

    35KB

  • MD5

    114fff9a95a104c3b361453ce53a597a

  • SHA1

    12b2c2299478b30f41f8c5ccf27fe57948ada879

  • SHA256

    561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc

  • SHA512

    c3609a69684060b4c9d8a73d636e9808862aadf2929299b4ed9a294c99f0b16f272811d72bb49df7ecadb072af697e52d16cbf8df546c2bd5cc34debfa8a3a7c

  • SSDEEP

    768:V2qeYbAgwtioZvQhwmSEXaypnzDNe4ChI6gq3UI6A:VkYUr62PSXnzDNJWF

Score
10/10
miraiunstablebotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/z0r0.arm6.elf
    /tmp/z0r0.arm6.elf
    1⤵
    • Reads runtime system information
    PID:707

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads