mirai | 5af4d795b51588a8d34b52fe7ec4f500bcc7ed8bbbb743017ca10850574ea259

Analysis

max time kernel
0s
max time network
152s
platform
debian-12_armhf
resource
debian12-armhf-20260127-en
resource tags

arch:armhfimage:debian12-armhf-20260127-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
30/07/2026, 06:26

Target
boatnet.arm6
Size 61KB
Sample260730-g7c6rssape
SHA256 5af4d795b51588a8d34b52fe7ec4f500bcc7ed8bbbb743017ca10850574ea259
MD5 57a71122848bd5cc30f82c9743afd4d4
SHA1 a88d0d0dfad219499469370f2580cba65ac96bc0
SHA512 8017c4cc6f63e990570a53841e453fb58d032259999284c755bfc86e43946eadfcd196afcf5d820918aea920518c1ca5dc97843d0142f0c5530c5763d90488f7
SSDEEP 1536:rTAAujqF933XVTI2CJ/ciIv2R69RXd26tbaDLf:K6QIY2RXdJbaDLf
TLSH
T1325302B0CAFD74635C751AB3CE56894135AA1370F2E4716B14E831317EE3C4249DA9E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	boatnet.arm6

/tmp/boatnet.arm6
/tmp/boatnet.arm6
1⤵
- Reads runtime system information
PID:773