Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    08/04/2025, 08:08

General

  • Target

    morte.arm5.elf

  • Size

    21KB

  • MD5

    d1e0363fb85b39e11523b79645f8000d

  • SHA1

    21ec01fa6efb57020fb3f673cad8dd01d8bc2cd4

  • SHA256

    544fd4e8f2b72877713371c5d8cdf85f0150aeaf7371f2686faacec5c5347795

  • SHA512

    c21e58d35466f0f49d065ca13f6e2d9d4a1be6fcb3b533da0e16a9d1345961bd89c361916ce8ffe037eb8b75a64960fd69ff57dbe962636f365645eb2216b4d3

  • SSDEEP

    384:yD6LUj1noyVfgvmRgVRvgZ3UOaBWxUKvIHhymdGUop5hjx3:W6L41noWizghLUkcs3Uozr3

Score
10/10

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/morte.arm5.elf
    /tmp/morte.arm5.elf
    1⤵
      PID:649

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads