Analysis

  • max time kernel
    0s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    10/03/2025, 02:38

General

  • Target

    93f95c366ffc46d93ede8882e5e04df9a8120bfd9957f38a1d16334ffa318738.elf

  • Size

    32KB

  • MD5

    de41f96ce90b12a7e2c024ce04c98530

  • SHA1

    a8993b69039115bd60e3235507bf16df71f15c00

  • SHA256

    93f95c366ffc46d93ede8882e5e04df9a8120bfd9957f38a1d16334ffa318738

  • SHA512

    2d1bd4ded4fbb01cecbd50ba51a23b6c2a0709b79fff8a8d551069f653d11606b3d44eb824f7bf729628c4ac694b648eda2ba827089a6a8f5bc9692f968fcd4c

  • SSDEEP

    768:DRb9tUnBFifFHqKx/+W276vUJ0T2tChKbFZFT/9SeJgGlzDpUYsT:DR6BFif8KsbGv/T2thHFT/9SKVqYM

Malware Config

Extracted

Family

mirai

Botnet

APEP

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/93f95c366ffc46d93ede8882e5e04df9a8120bfd9957f38a1d16334ffa318738.elf
    /tmp/93f95c366ffc46d93ede8882e5e04df9a8120bfd9957f38a1d16334ffa318738.elf
    1⤵
    • Reads runtime system information
    PID:704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads