mirai | d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab

Analysis

max time kernel
0s
max time network
144s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
06-02-2025 07:21

Target

d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab.elf
Size

26KB
MD5

37778c426ff38781cafe5bd42e63a9c4
SHA1

3403f530d6bd044316d35848ead31ae9d47766b3
SHA256

d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab
SHA512

c589f6c4a1783b5064934df4a092cb341b51010cd91c589eaed565cf808aacb58ecaee88f0f5fcad21a0249c8f98df46237e76a0164ea331982dc14b0005774a
SSDEEP

768:M+2kFcARoWfQLjRPKZebqUdtmw+4SLxW9q3UELn5:t/fOdKcuUdAzLtL5

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab.elf

/tmp/d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab.elf
/tmp/d45a642f7257c7ed4485b9552fd433368a3b043e01b78272e697d14273f1a1ab.elf
1⤵
- Reads runtime system information
PID:709