General
- Target efefa7.elf
- Size 172KB
- Sample250411-cefc7sxly2
- SHA256 b653d8ee081d23aac229ca0a9c079df119b2dd27c908fb759f8e0f81379d385e
- MD5 adb2495849d9b0ca40c95292cdb17060
- SHA1 a4acef53646217b9b33f1908a07a8de9cac3e085
- SHA512 38decb04e6a88931630e78935c068d0d9c0696928b27a484d0459ec3c5d01628d4d717383b0cfb14c015d275c3b365701048ab2027501c47c09429247e281cc5
- SSDEEP 3072:E68cS0LuJUISrUwU5CaQew9rnAJWq7AIPHvQ9VJi/tGM/9k4DFj:E68c5ZzU5CaQew9rnsWjIfvQPJi/4M/H
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
efefa7.elf
Resource
debian12-armhf-20250410-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
BOTNET
C2
-
141.98.10.142
Targets
-
- Target efefa7.elf
- Size 172KB
- SHA256 b653d8ee081d23aac229ca0a9c079df119b2dd27c908fb759f8e0f81379d385e
- MD5 adb2495849d9b0ca40c95292cdb17060
- SHA1 a4acef53646217b9b33f1908a07a8de9cac3e085
- SHA512 38decb04e6a88931630e78935c068d0d9c0696928b27a484d0459ec3c5d01628d4d717383b0cfb14c015d275c3b365701048ab2027501c47c09429247e281cc5
- SSDEEP 3072:E68cS0LuJUISrUwU5CaQew9rnAJWq7AIPHvQ9VJi/tGM/9k4DFj:E68c5ZzU5CaQew9rnsWjIfvQPJi/4M/H
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Deletes itself
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.