mirai | 1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240418-en
resource tags

arch:armhfimage:debian9-armhf-20240418-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-01-2025 03:11

Target

1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e.elf
Size

26KB
MD5

2324aaf02957b44bab1caa301721240a
SHA1

121268ba985ad2f603b686b20aa78da606975bef
SHA256

1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e
SHA512

8aff076e67e55efcc41b855fdb309f78a78d6a8eed7f237251246c5e06b269e18532254061a5906174a97707ec2712546d50701567894fa6771266782d2c867a
SSDEEP

768:eMKyhegCCMqfizjoNpd2vJdX6vwrG9q3UELue:NKy4qfqoeJdXWgrLD

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e.elf

/tmp/1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e.elf
/tmp/1cc5bdfe1d7e0551888de6c8e2e66864033442c159c850d167821c21b8c3dc6e.elf
1⤵
- Reads runtime system information
PID:637