Analysis

  • max time kernel
    1s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    19/03/2025, 03:32

General

  • Target

    8c16c180651f454f90d065178fe17f3156d6c1ab6a7590aea648ca502978947a.elf

  • Size

    33KB

  • MD5

    709b152da1dd9df90f4416714974c598

  • SHA1

    6e4938e4962dd9f0acbb16755071e1e2a8b5bf5a

  • SHA256

    8c16c180651f454f90d065178fe17f3156d6c1ab6a7590aea648ca502978947a

  • SHA512

    e055647f6c3e6c0df5bb0d12517426f6596d498f615bc183af83844d7773bf06c678af90b489efafc9690f201814b334fb97c339c90e1a9a69d876502f7a4ae7

  • SSDEEP

    768:Dn4ix6rNOUWcSYTQPTAu20XDw7CXnNSjiizfFJJgGlzDpUYsbp:DRxwdXC/Bzw7pGizBVqYYp

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • Deletes itself 1 IoCs
  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/8c16c180651f454f90d065178fe17f3156d6c1ab6a7590aea648ca502978947a.elf
    /tmp/8c16c180651f454f90d065178fe17f3156d6c1ab6a7590aea648ca502978947a.elf
    1⤵
    • Deletes itself
    • Reads runtime system information
    PID:698

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads