Analysis

  • max time kernel
    0s
  • max time network
    132s
  • platform
    ubuntu-22.04_amd64
  • resource
    ubuntu2204-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
  • submitted
    19-01-2025 02:26

General

  • Target

    689d088228788197f16282aaa19d63d0acfe01bdddd3a331c50c93a340de94ab.elf

  • Size

    42KB

  • MD5

    c0daeb8d95788466f9fd2d1cbaacb69f

  • SHA1

    a1fa77fed8bf0d89bc4c2ac32c033965ac756586

  • SHA256

    689d088228788197f16282aaa19d63d0acfe01bdddd3a331c50c93a340de94ab

  • SHA512

    0a1902b43ac7985c1612ceaddb37b9087df3ec4c5f25e13d28f61b44401804e254b39906cd1caf0460d1f9692965bb0db8457f4891d4ea424615f39c970b03a9

  • SSDEEP

    768:nryy1i4WU+3HDW8THmFlhQXppUtFQywnD0jOj3QS9M0l8nbcuyD7UVyqA:nZ10lqsHmfhz72wwgSK9nouy8sqA

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Deletes itself 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/689d088228788197f16282aaa19d63d0acfe01bdddd3a331c50c93a340de94ab.elf
    /tmp/689d088228788197f16282aaa19d63d0acfe01bdddd3a331c50c93a340de94ab.elf
    1⤵
    • Deletes itself
    • Reads runtime system information
    PID:1596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads