mirai | ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e

Analysis

max time kernel
0s
max time network
143s
platform
debian-12_armhf
resource
debian12-armhf-20260127-en
resource tags

arch:armhfimage:debian12-armhf-20260127-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
19/05/2026, 02:01

Target
ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e
Size 82KB
Sample260519-cfm5faaz5p
SHA256 ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e
MD5 2d748dcb1ee1de3d324e1296efc8e3ed
SHA1 bbbcd297063829262f28877cbf1b2a69f0ef68c3
SHA512 9e7f01d0c1a674ba22e2e6ecf6c2c3b97b140f67b17947f3e81220b0b1a8748f439e4d8b1e1df25ebbe6271acde75494480087adbac9907f61bc1691affabafe
SSDEEP 1536:SiP8fq2XZHuSALCpVmkInClz4fBJFjUrAFYMezOY3y+7Y:J8XZHuzAkkTEJkAFYdzF3t7Y
TLSH
T1B1831232EE1A6988C6681C70E47FD2C739F7C9F560E63C20BA8419613D55E3C5C997C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e

/tmp/ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e
/tmp/ab42e889d712292f20cf056f8c8bef00d1eec7eecca8105a7131ef04fb27ec4e
1⤵
- Reads runtime system information
PID:816