mirai | 497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
21/03/2025, 02:43

Target

497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb.elf
Size

32KB
MD5

258aa1aa7b589969593ccbd6d1a77669
SHA1

c0cf927ae955e537971cc8df52e9ebdb7faea99f
SHA256

497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb
SHA512

2c135184a88d7dbabca9b97a632799d7456d63ac153359d79747b809498411b84c0a6a2ecfe3ee1dba91ba3bff5fd43a44e73b858edceec6d3207fd7c3aefe4b
SSDEEP

768:PoiWiO031vpAPbrVWZK3XVGxm9X29q3UEL5IC:Porm1vpALgUJbLZ

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb.elf

/tmp/497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb.elf
/tmp/497018b8ad1f31039463a421b413ff12a830c8aa8aaf4937e9c599e1e8fd02bb.elf
1⤵
- Reads runtime system information
PID:641