mirai | 3121275750804c08737406c6d5ca006cd961d2f5755ebafcbb33bf5f996b77d8

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
21-01-2025 22:47

Target

154.213.187.188-boatnet.arm6-2025-01-21T213316.elf
Size

26KB
MD5

070b2af2c3b74c598fc082e4d914f6f9
SHA1

c3c3507baa221af3056892a4020bb0aced2d9728
SHA256

3121275750804c08737406c6d5ca006cd961d2f5755ebafcbb33bf5f996b77d8
SHA512

8721ae7fcca51d9e5597a05ca2cef469fe0af7c74cfa88773ae8dc48aa3cdaffc9dad5066da20ed7b3ea02200c2aca9f0c0c634a1b680ab782b56dd3218a3a0b
SSDEEP

768:eMKyhegCCMqfizjoNpd2vJdX6vwrB9q3UELug:NKy4qfqoeJdXWg0LV

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	154.213.187.188-boatnet.arm6-2025-01-21T213316.elf

/tmp/154.213.187.188-boatnet.arm6-2025-01-21T213316.elf
/tmp/154.213.187.188-boatnet.arm6-2025-01-21T213316.elf
1⤵
- Reads runtime system information
PID:652