mirai | 4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
19-01-2025 02:21

Target

4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620.elf
Size

47KB
MD5

dcbec1383e3dc04cab859bdd6fac2068
SHA1

0ba02814ca170fd250d49f2c93bb5e26fe60b2d6
SHA256

4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620
SHA512

6aaa9c19ff58efd1a5a7077196d81a0f8742ad194456a4d83b8f0c2d488b135b47a05eccfd824d32d867484b941531ef030244786a53a940111c7181eedea591
SSDEEP

768:nQgWaJILZuM9CDOGk3onBxodp77p2xrCLt9lmON8bbU5R1I8iqJHDXITq3UINYn:nQ7EI9kO7YBsppJLjdNz3piqJjFC

Score

10^/10

Family

mirai

Botnet

UNSTABLE

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620.elf

/tmp/4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620.elf
/tmp/4c9cb363617c0c2ca5ce9b27bb86af0a07ba72e004cd12c9832c5c4537d29620.elf
1⤵
- Reads runtime system information
PID:645