mirai | 223cf222289d57b21cecdbb3417c2d46b36c889d36e599971a46d3c64ec3e425

Analysis

max time kernel
0s
max time network
150s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
22/07/2026, 10:09

Target
phantom.arm6.elf
Size 28KB
Sample260722-l626qade32
SHA256 223cf222289d57b21cecdbb3417c2d46b36c889d36e599971a46d3c64ec3e425
MD5 d607558e974fd484380d1fca02310ce6
SHA1 2c9099fc6ffb9bdc68123fd075c5bb92bd7ec8a5
SHA512 a7f0f29bd2f82636e40aa1723184e4ddea6ea8f8d10c0cac814e407107473d005b9e2bbdfe4013eaa3123486bf34778db6ec57714b7e7162e7232c72be651506
SSDEEP 768:NonP0fMESnpKjt1zHEm4FdRvfKQF9ODpwRApzV9q3UELQYE:6Pwi81zkm419ODzpzoLi
TLSH
T117D2F13BEA529768C0206C77F6BEC5473F8A26FAD06EB01216204777F6D20135A716CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	phantom.arm6.elf

/tmp/phantom.arm6.elf
/tmp/phantom.arm6.elf
1⤵
- Reads runtime system information
PID:786