Overview

overview

10

Static

static

5

sora.arm6.elf

debian-12-armhf

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    sora.arm6.elf
  • Size 32KB
  • Sample261008-prw8psxtes
  • SHA256 4e116b164dbf33287b6d2e2a79ecbca47d7103f131d2356c8caad498c792d225
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
miraisorabotnetdiscoveryupx

Malware Config

Extracted

Family

  • mirai

Botnet

  • SORA

C2

  • 204.194.50.3

Targets

    • Target
      sora.arm6.elf
    • Size 32KB
    • SHA256 4e116b164dbf33287b6d2e2a79ecbca47d7103f131d2356c8caad498c792d225
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetsoradiscoverymirai

    • Family: Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

      botnetmirai

    • Mirai ARM payload

    behavioral1

MITRE ATT&CK Matrix

Tasks