Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    23/03/2025, 11:12

General

  • Target

    arm5.elf

  • Size

    17KB

  • MD5

    5c5594976ba23697c410e1be2b3845d3

  • SHA1

    736a24683b40ac15607b4a8808050f8fc426fde7

  • SHA256

    10b40ef6ee67fb22cbe03c35b19bf09e2039d4771a95d16d5be2c3fa5447eb13

  • SHA512

    8e7f212f2a2cc531ec20a66f98dd92618cd35177c117cd666e6e3b3b8d301cc977545f4a2c51fbdbc283ebf6eb112279f7fe3502f1daf8d63f8353ca75e4113d

  • SSDEEP

    384:yPsPjKwuvug0CV9cjN6Nl13hymdGUop5hta:77/gZNl13s3UozW

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/arm5.elf
    /tmp/arm5.elf
    1⤵
      PID:641

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads