Overview

overview

10

Static

static

5

30482b8f60...80.elf

debian-9-armhf

10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    18-01-2025 03:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    30482b8f60b505ad06cab6af1715dbd63f896de0b91e054cc08f3f8130a7c280.elf

  • Size

    37KB

  • MD5

    ddc66dddc7b835d9bb2ae795a497bd7c

  • SHA1

    50639e184610075bdd21518bc1ecab256b663955

  • SHA256

    30482b8f60b505ad06cab6af1715dbd63f896de0b91e054cc08f3f8130a7c280

  • SHA512

    aff3716036eee14c2cfa9f80f6ae32ced2f2cc070fe82608ab265f444c78a08349849e7f8450e4418b774bdb19d17bd618d7eb772176601db69e3dc2e338fa4a

  • SSDEEP

    768:lteXEQb922QIlJii5z6PaJgIxRTDpLQj4/29GNEIX0l455SK/:lt0Hg2QIlki5zzrxRtQdGiI4MYK/

Score
10/10
miraiunstablebotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Deletes itself 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/30482b8f60b505ad06cab6af1715dbd63f896de0b91e054cc08f3f8130a7c280.elf
    /tmp/30482b8f60b505ad06cab6af1715dbd63f896de0b91e054cc08f3f8130a7c280.elf
    1⤵
    • Deletes itself
    • Reads runtime system information
    PID:641

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads