mirai | Tsunami[.]arm6[.]elf

General

Target
Tsunami.arm6.elf
Size 82KB
Sample261109-vvclcsgh52
SHA256 0b5437095759ad7812f67ff5e2c90d7744786402e6e568b6817354ee567ceaca
MD5 90334b7f47cc9667158ac351b414b09a
SHA1 30bda19198d71a3deccada91dc0b46244c33b2e6
SHA512 daecda287cf8d39f8343616d74e3540bff6c74d62a43537ae15ca4e46d5e112d9eb61a2e27b13d374765863409a1e4585013e4fe71d74719d073c9d1d3d7d30a
SSDEEP 1536:/UnDZ4A58xc5qSvfjf/x5JqB5OH95J2QIWK5TY5fJb25qWZcxI5im3ndHnjSjPP:IZXqGqYfLxrqBs+QAC2p3ndHnjS
TLSH
T1D3832A46B8D1CB11C6C523BAFA1E018D3313576CE3DF72529E246F2437CA96B0A7B456
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet mirai

Family

C2

Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai

Mirai ARM payload 1 IoCs

resource	yara_rule
sample	family_mirai_arm

SHA256 0b5437095759ad7812f67ff5e2c90d7744786402e6e568b6817354ee567ceaca
MD5 90334b7f47cc9667158ac351b414b09a
SHA1 30bda19198d71a3deccada91dc0b46244c33b2e6
SHA512 daecda287cf8d39f8343616d74e3540bff6c74d62a43537ae15ca4e46d5e112d9eb61a2e27b13d374765863409a1e4585013e4fe71d74719d073c9d1d3d7d30a
SSDEEP 1536:/UnDZ4A58xc5qSvfjf/x5JqB5OH95J2QIWK5TY5fJb25qWZcxI5im3ndHnjSjPP:IZXqGqYfLxrqBs+QAC2p3ndHnjS
TLSH
T1D3832A46B8D1CB11C6C523BAFA1E018D3313576CE3DF72529E246F2437CA96B0A7B456
MD5 SHA1 SHA512 SSDEEP TLSH

linux arm