mirai | 0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714

Analysis

max time kernel
0s
max time network
140s
platform
debian-12_armhf
resource
debian12-armhf-20240729-en
resource tags

arch:armhfimage:debian12-armhf-20240729-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
10-01-2025 02:01

Target

0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714.elf
Size

30KB
MD5

3b838dbd843afe9ae5ee24b87101e3a0
SHA1

2a90db1dc88e6d0546485a3e94e131c3ff7884ed
SHA256

0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714
SHA512

d95de173b29edb8952f3fd9242915d70ab395a9e2c63838b066d6bcd74b5e4b785b326e4c7e478c9e4bbd56dd3cadbd75572eca42070a77fc9cf0ca8d3589075
SSDEEP

768:U9v95SKlIjOrv5tBqUlBLxVyQazMfBLz+vL9q3UELWMi:U9v9k4UEvBqUlBNUQmixzuqLTi

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714.elf

/tmp/0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714.elf
/tmp/0251cd54532729a1a139fda0843e694982068f51a43a61fd3ff71e3bbc2e6714.elf
1⤵
- Reads runtime system information
PID:703