mirai | cbfa29be93d0514acd8179f75705cdad7d4b4ad86861b5bef99c2384404894b3

Analysis

max time kernel
0s
max time network
140s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
09/08/2026, 12:18

Target
boatnet.arm6
Size 60KB
Sample260809-pg1hdaxemb
SHA256 cbfa29be93d0514acd8179f75705cdad7d4b4ad86861b5bef99c2384404894b3
MD5 411586fe11d58bab43a4a39fc7d2449e
SHA1 100293bb2ee8b97caa46563703c73a873b1a9481
SHA512 7c04a08216c14d3ec56f921f2a26f50781e564cf875fc8b1635b02f7c0fc962e454ef791546202037be5f6b6c62d8e2122ef4a10d8c9c0ca1ca9d4793f396fa1
SSDEEP 1536:kAgx+YrM40kX6ETq+Cl2GzgTN1LY+q+luD0dBCu5599Lh:BDmFlby3+luD0dBR7fLh
TLSH
T1FB5301A1F5CBEC48DAF01975C5282BD776647BBD83FF002DA8468808E39D0D958B99C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	boatnet.arm6

/tmp/boatnet.arm6
/tmp/boatnet.arm6
1⤵
- Reads runtime system information
PID:786