mirai | 2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
26-01-2025 03:15

Target

2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b.elf
Size

26KB
MD5

04bf541d21bdbeac6834f191bbef9e94
SHA1

a514f537604e6736ac7555f1abe109730dacbc2c
SHA256

2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b
SHA512

4487fa94c98e24e05a6b0f1d0383befe0e9c2255a07b54988bb0c468948ae5a10140aece3dfec946459d7d0118e58b5e9b2aaed50e7ee1c5df04cb0ca7ec9c34
SSDEEP

768:eMKyhegCCMqfizjoNpd2vJdX6vwrgv9q3UELu/:NKy4qfqoeJdXWgrLm

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b.elf

/tmp/2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b.elf
/tmp/2a1eac05c9387b0041eee14e64c1c5c548e160892e956541ab8d4d55887eaf0b.elf
1⤵
- Reads runtime system information
PID:648