mirai | 0210226f81dd3a82cadf856dd996f0b5fcb210cb2630d8d1eb1a50abc7c7a95e

Analysis

max time kernel
0s
max time network
146s
platform
debian-12_armhf
resource
debian12-armhf-20260126-en
resource tags

arch:armhfimage:debian12-armhf-20260126-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
01/05/2026, 06:22

Target
boatnet.arm6
Size 82KB
Sample260501-g49esscx21
SHA256 0210226f81dd3a82cadf856dd996f0b5fcb210cb2630d8d1eb1a50abc7c7a95e
MD5 1b5c4f00b60fee7bf341001853aafe3a
SHA1 89b5925efc72d63bfd32a1e9552b4b197377a46b
SHA512 f448d5081a53278b7a8f6fd48b750fef758f651b96773c809bdfc345a6c462a38424bdd0bf4ad597a4ad21575f50b3d8ae9c663adbd0b224e54e2129ba424ff0
SSDEEP 1536:FiP8fq2XZHuSALCpVmkInClz4fBJFjUrAFYMezOY3u+ZA7N:c8XZHuzAkkTEJkAFYdzF3u+S7N
TLSH
T121831273EE1A69D8C6650C34E47AC2C739F7CAF660D53820BA440AA53C65D2D6C9E3CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	boatnet.arm6

/tmp/boatnet.arm6
/tmp/boatnet.arm6
1⤵
- Reads runtime system information
PID:786