mirai | ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1

Analysis

max time kernel
0s
max time network
186s
platform
debian-12_armhf
resource
debian12-armhf-20240221-en
resource tags

arch:armhfimage:debian12-armhf-20240221-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
01-07-2024 01:23

Target

ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf
Size

51KB
MD5

911cebb3ab0ac2df85889b406a2e32f4
SHA1

bc8f3a5b3f0f39ad3f4b9fffbcf80554e05b5da3
SHA256

ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1
SHA512

6da675c295f3ace933e2d3843f8f0fc979d3592cc659f6eb60bdcd8b76876411f2a8e080c3f9dd3afcf020904d15d3ce550ea92af46d589fee7df2463c4b63f0
SSDEEP

1536:D9O/Rez1Ww0nybEUYSLcPqF1aBexo4opKZb/:D9O/gl0nyb7LGqFUFu

Score

10^/10

Family

mirai

Botnet

SORA

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf

description ioc process

File opened for reading /proc/self/exe ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf

description	ioc	process
File opened for reading	/proc/self/exe	ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf

/tmp/ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf
/tmp/ec45c2ac73b24d099dd866f1189f75119af9d59a40fcc1168513d6906e864ed1.elf
1⤵
- Reads runtime system information
PID:702