mirai | b26ce9d2b84da259a16cff2788c9d36011f60f4fcfaf08a2a736490db92e4949

Analysis

max time kernel
0s
max time network
141s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
06/08/2026, 02:21

Target
boatnet.arm6.elf
Size 42KB
Sample260806-cs71da1gqa
SHA256 b26ce9d2b84da259a16cff2788c9d36011f60f4fcfaf08a2a736490db92e4949
MD5 cf5df11f2527f30d2836723a1ec94ebc
SHA1 3f8d93239910f688e14a3690e145c2bc599fed7d
SHA512 616501087b67abca7cd2332f643c86d0231fd9342e2a178ee075d4fb0a8df57e4a0983ca00ab265f038a5cada346fc4be76f1448013cfbc09762683c208ff4fb
SSDEEP 768:ga6sPPGAgp62bwuFr54xdJk3jVR9FRC0LNZSU81uS9q3UELrw:ga6sPfgp62bbIdO3jRLLNZS51uHLc
TLSH
T18813F15AE32E4652CDB35E71DAE82C0732AFC26890ED30B207AD5A9065C270D5DF97C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	boatnet.arm6.elf

/tmp/boatnet.arm6.elf
/tmp/boatnet.arm6.elf
1⤵
- Reads runtime system information
PID:783