mirai | 71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
22-02-2025 04:07

Target

71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf.elf
Size

31KB
MD5

77f9737d6595161e3e34f11e8961b3b7
SHA1

5717234d6bf84d338479d7304aa039d196fcc382
SHA256

71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf
SHA512

1217f5bd0ace9319e3251fe1a8575c82f9f917a366fb9ae3cdd48ee308356ed7253f08a8aa06efe3322d39830a7d2e2da429ebea3930abd95df0f9cfc03e873d
SSDEEP

384:rSBehsL5wFgC4Urp3VvZhUzaAfVGbrc2/pkTNW7CQRkPgosmkyCizUs1tFhymdGe:ukh3G0p3VhUHqvKT4Fc9p/Fs3UozR6

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf.elf

/tmp/71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf.elf
/tmp/71cdb618ee059340c6f8f15cb8311fffe4d78e1fcf29bbf36e8811551af3eecf.elf
1⤵
- Reads runtime system information
PID:660