mirai | 81240ff62a3ab425a48bdba34bfa750d34dcc06fde621bb3567fe35ffb4b6843

Analysis

max time kernel
0s
max time network
149s
platform
debian-12_armhf
resource
debian12-armhf-20260513-en
resource tags

arch:armhfimage:debian12-armhf-20260513-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
20/10/2026, 01:00

Target
sora.arm6.elf
Size 31KB
Sample261020-bc2b8abv3t
SHA256 81240ff62a3ab425a48bdba34bfa750d34dcc06fde621bb3567fe35ffb4b6843
MD5 0266b3d556c92a4676c20b29245e152e
SHA1 6c6c3c349b8dfc9f76b103b4b1aed4e404efc541
SHA512 039022a78968fe9de16bf2bea68eae549398a8cc2a35ee58a55b7aa6493a9d31a51f10715bf44ba2219c7666e440c166509a75a868ecfa783d5f71b4a6b911ee
SSDEEP 768:vuYLWjqkDATSWEJeY6mQJIykUssM14oH08xNiy9q3UELdp:vuYLrNTbEsY6pWla8xNinLz
TLSH
T1A4E2E12723C538E1BE900F3BC4AE49C11F2957FE46E9B62E74654B242BF34269F96103
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family

Botnet

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai ARM payload 1 IoCs

resource	yara_rule
behavioral1/memory/782-1-0x00008000-0x0002daa0-memory.dmp	family_mirai_arm

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	sora.arm6.elf

/tmp/sora.arm6.elf
/tmp/sora.arm6.elf
1⤵
- Reads runtime system information
PID:782