mirai | 72a8af3606172b3a4e105b7507dee9a639f18bdd30ef6172715b4a805a870e3a

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
05-07-2024 04:02

Target

79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf
Size

19KB
MD5

feb84603c2b803291bef31ba1d10a404
SHA1

89c8ff9a54946909b7db50eacc0ccc832bef340f
SHA256

79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71
SHA512

005c55ead05279df761892cb9e52053f8f5b2f659db603450203683a9961a160f3c6129a0ec4248d079444961ff41cdf36793b0abf57ad2155a5d5cd0b8e87c5
SSDEEP

384:WpeZY5qyxOKkn6C9DadTwkRh5Zj+xp8C1KLIz4neDCMVGHmdGU5EIZ:WpeZY7OAC9DaZnfXjShKkfCCGH3U1Z

Score

10^/10

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf

description ioc process

File opened for reading /proc/self/exe 79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf

description	ioc	process
File opened for reading	/proc/self/exe	79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf

/tmp/79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf
/tmp/79203d066d6f68cbb7d57e127b335e1b2e428aa418f1d150a35fb6b3beaa3f71.elf
1⤵
- Reads runtime system information
PID:647