mirai | 888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320

Analysis

max time kernel
0s
max time network
141s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
17/10/2026, 11:11

Target
jaffacakes118_888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320.bin
Size 40KB
Sample261017-narq8aev6t
SHA256 888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320
MD5 8b6acea58e1b7bf44972900e91634c4b
SHA1 95c0b2ac2b6de603fc42228ca9c1fc09af2450e6
SHA512 84db7d17d2ff056865eed6bdc8ad1df7c92d03619f8212ad67ee878bd485d6a317ee41a6b9b95a88f1e070eb82a34bb12d1dfa8a5dbee0f96612231e43808aae
SSDEEP 768:HjMdn6EX/3QYm9D8uWniefYTAhieOY0Mkn+fm9q3UELHh:HjMdDYNxWiuPirtz+zLB
TLSH
T1D703F118D751E66689A45DBEC8FD4712ADA84CF8F15938326226AD3C75C624B3FC2283
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai ARM payload 1 IoCs

resource	yara_rule
behavioral1/memory/786-1-0x00008000-0x00038a8c-memory.dmp	family_mirai_arm

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	jaffacakes118_888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320.bin

/tmp/jaffacakes118_888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320.bin
/tmp/jaffacakes118_888a3884c520386bb324bd73e357cc40bf0ffe07d6a388551e333ff18ef15320.bin
1⤵
- Reads runtime system information
PID:786