mirai | 3ffe3e58149ec9a62c889d34e57bcf9adb9cafddf5de88baca85b80511b9b857

Analysis

max time kernel
0s
max time network
7s
platform
debian-12_mipsel
resource
debian12-mipsel-20240418-en
resource tags

arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
09/03/2025, 15:22

Target

SecuriteInfo.com.Linux.Siggen.9999.31985.32179.elf
Size

34KB
MD5

69c2cf29a9fdbb6a55c7454328c431f6
SHA1

75a418160a80c90bea59f65f056801e1389e6c0c
SHA256

3ffe3e58149ec9a62c889d34e57bcf9adb9cafddf5de88baca85b80511b9b857
SHA512

a835c71d1cc4f80518bbf06c5402f01054708526d4a754673db82ba1573ce427299257b3b365ebef1a7e65a793e9b009deb3c9d6b9dcce956655895d583a9288
SSDEEP

768:0srgS01MJxdAmjIF0U4Z6skZwHS6b/q3nYWMK:bgR1MJPAmjIyU4Z6b+HS6enp

Score

10^/10

Family

mirai

Botnet

APEP

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	SecuriteInfo.com.Linux.Siggen.9999.31985.32179.elf

/tmp/SecuriteInfo.com.Linux.Siggen.9999.31985.32179.elf
/tmp/SecuriteInfo.com.Linux.Siggen.9999.31985.32179.elf
1⤵
- Reads runtime system information
PID:742