mirai | efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76

Analysis

max time kernel
0s
max time network
141s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
09-01-2025 04:14

Target

efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76.elf
Size

26KB
MD5

379aa751fa25bea517c67c4d39d73164
SHA1

a8eb5c296f7cc1859b6ac469b85a1edc1c1e47fe
SHA256

efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76
SHA512

781cec6f013f352c5cf6e20af4d13bffb5d8ab4857c9e8d51aca4ddeb6d55d81abd98d15ba47d7950daad3dadfac11ceca00f1363f064de7566642a7c82f86ff
SSDEEP

768:JMKyhegCCMqfizjoNpd2vJdX6vwrc79q3UELuV:OKy4qfqoeJdXWgdLY

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76.elf

/tmp/efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76.elf
/tmp/efa3cfb3885b67f8d3c12b2c503856f03aa7adb40d60398f3a4534fb5d8dee76.elf
1⤵
- Reads runtime system information
PID:702