mirai | 4889177aee9089ba50f559c6854c043dfd70c9c6852b4afcca9d881d1ff886e1

Analysis

max time kernel
0s
max time network
144s
platform
debian-12_armhf
resource
debian12-armhf-20250619-en
resource tags

arch:armhfimage:debian12-armhf-20250619-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
18/10/2025, 01:18

Target
boatnet.arm6.elf
Size 43KB
Sample251018-bpec8abk2v
SHA256 4889177aee9089ba50f559c6854c043dfd70c9c6852b4afcca9d881d1ff886e1
MD5 469917c4eccebf6a5dec71e38e7c3a21
SHA1 3d0b6c0fabf7d7a15366e28a81b6c29230b11ff7
SHA512 888a0c21cea57e3a83a8e8ca7aa3632dfdd731e96ce6ea11f5a635ee0b058edef81aa2784d242e63c814d55c9186d99110a69a92cfd23e43e4fdbd34c1eb011a
SSDEEP 768:mlIKBIN0WhWMEIlxlDxBo4kzsbEaiezPKrfi+bTUSHc7E9q3UELf0p:ml3IN0WkMEInlro4kapbj6TUSetLcp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	boatnet.arm6.elf

/tmp/boatnet.arm6.elf
/tmp/boatnet.arm6.elf
1⤵
- Reads runtime system information
PID:785