mirai | 7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328

Analysis

max time kernel
0s
max time network
148s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
30-01-2025 03:26

Target

7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328.elf
Size

26KB
MD5

b6832ac7b88971001aaf57c54832840b
SHA1

afafbb55128cfb88ce2db6acdebe666224532587
SHA256

7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328
SHA512

e3fb333407151629cbeebbb712a965f7b60c80d7a2e9e3d76985d90fee75e0b8d225afdc1a6e53d1f6576476a821eb68f302a2a1672119c4f5dd216442832f34
SSDEEP

768:sNFXzwxngO8oDukWegwpzMpKK9Lbz4kzQEYC39q3UELOs:sNYn9F9lSKK93kkzQEOLb

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328.elf

/tmp/7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328.elf
/tmp/7f99ea5b948e31458578c4b141d6481b4c628dd40e63a46d097a53d9d39be328.elf
1⤵
- Reads runtime system information
PID:707