mirai | Tsunami[.]arm5n[.]elf

General

Target
Tsunami.arm5n.elf
Size 62KB
Sample261109-vvcalagh49
SHA256 1bd30978770fbd7fe5abc0abae407b65990a477ab70f4d2625073548a5ef6046
MD5 858b39483fa0ea36d04eb91dcf62dfbf
SHA1 aad4f7dcee132352d58b134398d27e50a0fc5fc6
SHA512 3c818aa71d6aa37b7d50019718aba5785c6cd7b2c35105e30c1441785dd4a355849a05f0b1467a06100f2107741979a5562be7a0ef07107fd086ca1cf3e22d30
SSDEEP 1536:f/m4dIJLvRitcalJIA385DHk5WP845Uhh2sZ5K+5EmL705oj7C:Hm4dI7NA6kItuhrZrN0J
TLSH
T199531A85BCD1C526C6D023BAFA7F129D3322A3E8C2DE3207DC141B687AC955E5E37585
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet mirai

Family

C2

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai ARM payload 1 IoCs

resource	yara_rule
sample	family_mirai_arm

SHA256 1bd30978770fbd7fe5abc0abae407b65990a477ab70f4d2625073548a5ef6046
MD5 858b39483fa0ea36d04eb91dcf62dfbf
SHA1 aad4f7dcee132352d58b134398d27e50a0fc5fc6
SHA512 3c818aa71d6aa37b7d50019718aba5785c6cd7b2c35105e30c1441785dd4a355849a05f0b1467a06100f2107741979a5562be7a0ef07107fd086ca1cf3e22d30
SSDEEP 1536:f/m4dIJLvRitcalJIA385DHk5WP845Uhh2sZ5K+5EmL705oj7C:Hm4dI7NA6kItuhrZrN0J
TLSH
T199531A85BCD1C526C6D023BAFA7F129D3322A3E8C2DE3207DC141B687AC955E5E37585
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm