mirai | 7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10-01-2025 02:37

Target

7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226.elf
Size

49KB
MD5

a04254f0cc649a0bace4e737fab32bf5
SHA1

89192bab06f706ce9e150757fa43f94735ad1c56
SHA256

7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226
SHA512

021c9e8c3e14f9a7b6844c7e1c032f7b65fa6c6fafddef1b9988affa3219d31d6ab31331291fe4c8e25c07185dee2e8f5ff54b797d9b9d3e40974bf6cafa7915
SSDEEP

1536:qIGFDR4bwGfuhoW9okqf01PLl/VJBgG89MiXS:i1R4fumSokqQLl/OGQM4S

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226.elf

/tmp/7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226.elf
/tmp/7616e12ea1d265ff4d48db0ef751ae1ab4e8f428721163fc6b7a2c9dd6e6f226.elf
1⤵
- Reads runtime system information
PID:641