mirai | 561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
06-01-2025 02:37

Target

561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc.elf
Size

35KB
MD5

114fff9a95a104c3b361453ce53a597a
SHA1

12b2c2299478b30f41f8c5ccf27fe57948ada879
SHA256

561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc
SHA512

c3609a69684060b4c9d8a73d636e9808862aadf2929299b4ed9a294c99f0b16f272811d72bb49df7ecadb072af697e52d16cbf8df546c2bd5cc34debfa8a3a7c
SSDEEP

768:V2qeYbAgwtioZvQhwmSEXaypnzDNe4ChI6gq3UI6A:VkYUr62PSXnzDNJWF

Score

10^/10

Family

mirai

Botnet

UNSTABLE

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc.elf

/tmp/561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc.elf
/tmp/561c9149f751a26a64c14b7d7138060fd76b9785ce286f70a8550c6d0064c8cc.elf
1⤵
- Reads runtime system information
PID:652