mirai | 8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
10-01-2025 02:41

Target

8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb.elf
Size

49KB
MD5

ea27e023adb96d08e4ac21d68cc3fdde
SHA1

17183680b16ab549fb640208e027a6f2ca494ab5
SHA256

8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb
SHA512

a37b94ec29631a8ccca90ffde89c94f6fb15118ac0c0d4605f463ddcf189999f41cb19285fdfe5b6c31aace0ce4c9f9a9bb3fcdb59191948cea64d70297ad4f0
SSDEEP

1536:qIGFDR4bwGfuhoW9okqf0A/Ll/VJBgG89MiX+:i1R4fumSokqbLl/OGQM4+

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb.elf

/tmp/8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb.elf
/tmp/8556934b78ac25d33addbdd7c11c0f82e608276cb2e6e41f2c0ece63136141fb.elf
1⤵
- Reads runtime system information
PID:660