mirai | 0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
16-02-2025 02:07

Target

0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65.elf
Size

32KB
MD5

3c35bb4e9222e5712e39401dbc0dda66
SHA1

0b2bad5c6965c24f55ea0394075a8d061eaa0689
SHA256

0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65
SHA512

5fe4540b4accd93bd93508f29770f419021a665c7212f4a4678623a158b059f8eb61fcfcb5de4d2855b6e3d53ab1841dc136d0420e9ff42d4a49a77386978875
SSDEEP

768:j84XvSLzLG41u0L7ZFIJFE3dbkr0ScT+9q3UEL5IJ:j89fJ1u0P7Iw7BPLC

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65.elf

/tmp/0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65.elf
/tmp/0dc3bac57e47cf55f51d38ee6b3df71e15663a8dc3af2f147821d61575ea3c65.elf
1⤵
- Reads runtime system information
PID:667