mirai | Tsunami[.]sh4[.]elf

General

Target
Tsunami.sh4.elf
Size 66KB
Sample261109-vtsaesgh42
SHA256 befa842a12bdb3dd446aec70bfecf7e276fdc180d9650b9009caa00fb1976578
MD5 d8f78269b4d03db61bc8c408001984f0
SHA1 8438d77c6aa49223e843189d55b7d694068b5512
SHA512 596be928daf80759101ef1806091fd5fabd4d65e5dd0b0aa276b0f82ee04355f8aff4aa5876f26e9fcc9613c3ba2e763e8b69e9a53c75471d4c549bbf71cc6b7
SSDEEP 1536:T/vpTliyakCmxe0lcUs+G+n6kcZpDk7HCcMZDCPZhL:TXL5LxjlG+6d6HhMZD
TLSH
T16663BEB6C9245EC0C154027560F0CA7D57A3EE48668B0EB5AB4DD99A940BEDCF20E3BD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet mirai

Family

C2

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai Renesas payload 1 IoCs

resource	yara_rule
sample	family_mirai_renesas

SHA256 befa842a12bdb3dd446aec70bfecf7e276fdc180d9650b9009caa00fb1976578
MD5 d8f78269b4d03db61bc8c408001984f0
SHA1 8438d77c6aa49223e843189d55b7d694068b5512
SHA512 596be928daf80759101ef1806091fd5fabd4d65e5dd0b0aa276b0f82ee04355f8aff4aa5876f26e9fcc9613c3ba2e763e8b69e9a53c75471d4c549bbf71cc6b7
SSDEEP 1536:T/vpTliyakCmxe0lcUs+G+n6kcZpDk7HCcMZDCPZhL:TXL5LxjlG+6d6HhMZD
TLSH
T16663BEB6C9245EC0C154027560F0CA7D57A3EE48668B0EB5AB4DD99A940BEDCF20E3BD
MD5 SHA1 SHA512 SSDEEP TLSH

linux sh