Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20250410-en
  • resource tags

    arch:armhfimage:debian9-armhf-20250410-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    14/04/2025, 19:45

General

  • Target

    parm5

  • Size

    17KB

  • MD5

    86524d9bc3eeaec30b461bb438bf0af9

  • SHA1

    03e7127792c3ac8f5b429f48ad04d9fe9fe2461f

  • SHA256

    e28443ff24ce1c28557e5c65bc16a6c0e16ba5bed5e85756713718b9c6ef3cf8

  • SHA512

    2a2d26620c7f5a6a79a634baf69ee43619f958d27e950e470d92c5cefdf706e4c743698d066878859851bb025ecebd2faa7e5de468d1888d7b754292195281f3

  • SSDEEP

    384:rbzJ2ycgX2VF8l4sdV4dRE/Bxp9V9a5I23oVQ6u1hymdGUop5h4f:Hd2TgGVF8lEda9VU5Iqo/0s3UozI

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family

Processes

  • /tmp/parm5
    /tmp/parm5
    1⤵
      PID:646

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads