Analysis

  • max time kernel
    0s
  • max time network
    141s
  • platform
    debian-12_armhf
  • resource
    debian12-armhf-20240221-en
  • resource tags

    arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
  • submitted
    01/04/2025, 03:33

General

  • Target

    ub8ehJSePAfc9FYqZIT6.arm5.elf

  • Size

    19KB

  • MD5

    3aa6a8b90fabc4e573ff0155a39e7e8c

  • SHA1

    db78a81494a82b2c44af5b5981883268bed56eef

  • SHA256

    e708b7a06462da1ab270b724d3f941d3827a6f753c8fb11d68188ee17f46aec5

  • SHA512

    9f691a795fca3d052d87932991975b050be93dbcd3d1ebbbef86ec97e7fbab4c8e10ba1e58527569c180eeef5d77ae7cbf65151953936ebd2a66b5b705d0391b

  • SSDEEP

    384:bhCC976joI8Xkhju37aOKn/eK8+xsnCzT0p0KKKqJh7qmdGUEpia2dyE:bkC9dhUE2N/eK8qsCzJKZu9q3UELpE

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    /tmp/ub8ehJSePAfc9FYqZIT6.arm5.elf
    1⤵
      PID:700

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads