mirai | 28db79faf3375a22864eebae11c620056631398b527e47bec4a87d32956fb33c

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08/03/2025, 23:16

Target

morte.arm6-20250308-2315.elf
Size

50KB
MD5

08b34de424fbc682e4e8247885bc1c57
SHA1

8f4483bb90333f6cc40b1b0075c0444f75a3a647
SHA256

28db79faf3375a22864eebae11c620056631398b527e47bec4a87d32956fb33c
SHA512

1770992ce5d233f26cf50a508b9c39ba50eeab30138e714208de36861b9cba1f6a6954767842fbf1f55e13153ca93171de48ad7be20e5cf9ac7a8a8529dbabb0
SSDEEP

768:93sopFrjRlve57fFVZETKcL5285vHheVl89cTg5xuz7BRwnGKF5c9OxCdw/9q3U9:5soTru57fm8GvH6l8iTg5xe7sG9DwuL6

Score

10^/10

Family

mirai

Botnet

LZRD

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	morte.arm6-20250308-2315.elf

/tmp/morte.arm6-20250308-2315.elf
/tmp/morte.arm6-20250308-2315.elf
1⤵
- Reads runtime system information
PID:660