Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    12-01-2025 01:00

General

  • Target

    d68556c2e47d77122900a05ca9386c7602aba0a242620e20b7d64bde02690dd6.elf

  • Size

    19KB

  • MD5

    07fe874a7213badcebf1e54e72364a97

  • SHA1

    2824f98c89fd244997a7f4c7119423baae86e00a

  • SHA256

    d68556c2e47d77122900a05ca9386c7602aba0a242620e20b7d64bde02690dd6

  • SHA512

    e0c6d2e2edfb59508c97e2d943795782c57298591b10f40cba3a1565e3f3b5b47f7ee79b86e3d28d51e180a2598ae70723f51cfca4a053a1aeb6c191ecc82fb6

  • SSDEEP

    384:43me3Vg19bm2MxowbW6kn0HG0sdXICYfgPGHZRbMwXNDcYhsh7qmdGUEpiaMyb:G3Vg19bm2Wo9aHG0u2g+HZRb7XVcYC94

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/d68556c2e47d77122900a05ca9386c7602aba0a242620e20b7d64bde02690dd6.elf
    /tmp/d68556c2e47d77122900a05ca9386c7602aba0a242620e20b7d64bde02690dd6.elf
    1⤵
      PID:656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads