Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    15-01-2025 14:48

General

  • Target

    xd.arm5.elf

  • Size

    25KB

  • MD5

    1eef15ca6184628b54671389f25d9074

  • SHA1

    7e4c479458507f94e58cf1948dd55edf9c7955f6

  • SHA256

    345d632c1f9def9685aaa29c9cf12a71c8d09f1126ec587cd18755ef26d3d941

  • SHA512

    4bd484a4e688638357d5301a66f56bc4f4a269beeae49f44b7abf83186b332b536e2806077a14200f9b4d12bc09f4f6e12a9f23b5bcb905ccc4924eb473e165b

  • SSDEEP

    768:4K/7BdJZz2ZP+EaPnpsNI+nXMogs3UozY3:4C7BnZz2obPngcgzI

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/xd.arm5.elf
    /tmp/xd.arm5.elf
    1⤵
      PID:659

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads