mirai | 01e6c07cd6d6f7c9b5d9af76eb1631ece66ac36c627668101cf2498b7e577273

Analysis

max time kernel
152s
max time network
160s
platform
debian-12_mipsel
resource
debian12-mipsel-20260126-en
resource tags

arch:mipselimage:debian12-mipsel-20260126-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
26/04/2026, 00:21

Target
mpsl
Size 71KB
Sample260426-ant7lsbs3z
SHA256 01e6c07cd6d6f7c9b5d9af76eb1631ece66ac36c627668101cf2498b7e577273
MD5 bba2925487c609018029ab23f32038f1
SHA1 85e12d63d016ae5f56edf5c566811b322d56621c
SHA512 4ae883639a341a9b95e4ca8d52c4fd70a5908e83f1e5aa49bd9da9258212e902aa43ba49156b8fb5ba40729fbbe9ce56e05567153043a2faaabdfe4b3a8219ef
SSDEEP 1536:adIiaKp5QviVOtdYlregVIcAvbf1vvFjgBuRSSdbzVaSsTcgJ/0:adIV4OtdYLigQR/1VMa
TLSH
T1F263F19DA2EDF491C7BC6CBD752CB61922041DC364DA0B9D93304C99EB4272D3ACB8B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	pdp2aqpnra1u1g3lnipitsv35h8k0ii0	803	mpsl

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	mpsl
File opened for reading	/proc/self/fd	mpsl