mirai | dfeccd50527cb1315442d103d8db4220755f42d4c714fa3580044602efe4aeaf

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
05-07-2024 01:55

Target

478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf
Size

37KB
MD5

617316de33320bff653d0f1af6b39afe
SHA1

83cabd22a1443dba9db3f2ad13ff91ce5f433587
SHA256

478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a
SHA512

43fa8a3039dd1a932e4a28a00f6606a4dd14542638755d6216494bd5b605043195559a229de04df577fa34b2a2ed6f5682477534d4820c535876e945b63de8dc
SSDEEP

768:t2EwT0JAQ0ZyLdS8KlYq3UIgdPd47VspkJSMOlBZ:5JAQ00xSBxEW5zSMo

Score

10^/10

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf

description ioc process

File opened for reading /proc/self/exe 478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf

description	ioc	process
File opened for reading	/proc/self/exe	478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf

/tmp/478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf
/tmp/478e75826eb0adac6bac96a71b2a4fe08581ac45940252c7d8548251420db72a.elf
1⤵
- Reads runtime system information
PID:646