mirai | bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4

Analysis

max time kernel
0s
max time network
128s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
22/09/2026, 10:15

Target
jaffacakes118_bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4.bin
Size 32KB
Sample260922-malpjadf48
SHA256 bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4
MD5 3459ba85e9de37ed11cee46c3bec88a8
SHA1 e650b20ae1cf35c163355d6b1a742dafd8617efc
SHA512 d036421df96cb63c964952841942e867438cfeab6075cdbff0a17c93ada51d8a55a7159d740233fab68e41245a477550d12963cc4328f091d4a7dd4ebd4db20a
SSDEEP 768:uoiWiO031vpAPbrVWZK3XVGxm9X9Ip9q3UEL5IL:uorm1vpALgUJGcL4
TLSH
T19BE20263D372B452DE783BF1F9AD85CA6BBC4BACC53770A319055618295A0835F3C883
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	jaffacakes118_bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4.bin

/tmp/jaffacakes118_bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4.bin
/tmp/jaffacakes118_bb0b2f124495d82fc483dba559be9db8e61d6d9e895a1ee45d9e04261c2945e4.bin
1⤵
- Reads runtime system information
PID:788