Overview

overview

10

Static

static

5

Hgf.arm6.elf

debian-12-armhf

10

Analysis

  • max time kernel
    0s
  • max time network
    148s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    09-02-2025 10:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Hgf.arm6.elf

  • Size

    28KB

  • MD5

    4fd4f9f1b1ee52ef87c6c9bb2bb6cf1d

  • SHA1

    4dafa87be7fa8c7eaf3ea9edba4049b5c341e0cb

  • SHA256

    ab8bca54ee15ebe8d59c50dd164712bc0e8865d6b69c1171a3970b03e7ad81df

  • SHA512

    eb43ba9f1bb89446744d6a7d01c1c8c9f338df770b0812ac9dce762103f1ab042935415678cdccbcffb65cf851384a86ea9f52e3da85315aa47785ff1c1fe6e5

  • SSDEEP

    768:ZhKB2fx2CWsxwDZzSBooWaFvJzyf7Eq3UIo+:Z8BCXxwNzQo4v9yf7rH

Score
10/10
miraibotnetbotnetdiscovery

Malware Config

Extracted

Family

mirai

Botnet

BOTNET

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Mirai family
    mirai
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/Hgf.arm6.elf
    /tmp/Hgf.arm6.elf
    1⤵
    • Reads runtime system information
    PID:707

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads