mirai | fa6f34f439e2f40fcdccaa83a88e08fbe2e9285eba8c9e29228df3e3c16c1078

Analysis

max time kernel
0s
max time network
148s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
01/10/2026, 04:25

Target
fa6f34f439e2f40f.bin.elf
Size 230KB
Sample261001-e13rqstcmc
SHA256 fa6f34f439e2f40fcdccaa83a88e08fbe2e9285eba8c9e29228df3e3c16c1078
MD5 5dc7c3777d28b4cc65edc88419fcd98a
SHA1 746476aa5066f571e58598f0d977fca8f0831e6c
SHA512 b5b4db810da9389e68cec8e324029173ff41f73672f756a7768e048a8c5a1a15fc8bd13bbcb6ec02ca11070bfaad62652c78b35cb4ec78ca4fd38c769fd0d1ac
SSDEEP 3072:oLVnem5HE0R6fa96XlauUvyvblgRT+d6Drpr3LPz/rpK7y9d9rEQhDRxTL2ARe5/:kjHbvClMvCbuIdERLPz/rdxnJL2+Suu
TLSH
T1633423F5C610CDA4AE7F453C0690A7326702A1646B9EEEE236B1355F8CE85EC7356E03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai ARM payload 1 IoCs

resource	yara_rule
behavioral1/memory/783-1-0x00008000-0x0009e804-memory.dmp	family_mirai_arm

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	fa6f34f439e2f40f.bin.elf

/tmp/fa6f34f439e2f40f.bin.elf
/tmp/fa6f34f439e2f40f.bin.elf
1⤵
- Reads runtime system information
PID:783