Analysis

  • max time kernel
    1s
  • max time network
    153s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    10/03/2025, 02:42

General

  • Target

    a15a90bb945aab46e2ce814445166231086c495920d3d7c5655ddb2b12e65314.elf

  • Size

    54KB

  • MD5

    4d6212e8df6641f84211af642ee42558

  • SHA1

    4c006c4631fa9d023a65441857a1aebbdec037de

  • SHA256

    a15a90bb945aab46e2ce814445166231086c495920d3d7c5655ddb2b12e65314

  • SHA512

    78f9371d99704d850fdabc01c855c3f7ee7a3344ab5d397046f89fd79f3719c83b237e3b879c7be1aaf90e5883ebcab762994d2cc300e7ac581cee26f156a4c3

  • SSDEEP

    1536:GE73IAP0rIMtO/XKzah65CA6sbOkFQP9qhq:Gg3qIt/XT+JMkaP9qE

Malware Config

Extracted

Family

mirai

Botnet

APEP

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/a15a90bb945aab46e2ce814445166231086c495920d3d7c5655ddb2b12e65314.elf
    /tmp/a15a90bb945aab46e2ce814445166231086c495920d3d7c5655ddb2b12e65314.elf
    1⤵
    • Reads runtime system information
    PID:708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads