Extracted

• • Target

    46cb41f8508a27f2cbb629fede3c3c2064a0f50403919c9cf9d201cc0525d656.elf

  • Size

    33KB

  • MD5

    1374d35d5467d1d731eec8c5264b29c3

  • SHA1

    92d8e0fb0075b7bdc83a3bf0f4963dd27812b408

  • SHA256

    46cb41f8508a27f2cbb629fede3c3c2064a0f50403919c9cf9d201cc0525d656

  • SHA512

    014ab12486b02eb488018c1f60226827c4c28f7ec5c12bbe42ae73a9bc6a5be1c6255836b368d80400d0284e6af015d7825c2da4a847fbca5eee1bc4b649fe26

  • SSDEEP

    768:NYuXQRH6lLCbVWLC51vC+X2F+KpONF64j4wK4V77aHnbcuyD7Uiyqd:NXXwuLCbVW+PvDX2F+akPj4uqHnouy8A

  Score

  10^/10

  miraiunstablebotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (180870) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies the Watchdog daemon

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  • Changes its process name

  • Reads runtime system information

    Reads data from /proc virtual filesystem.

  behavioral1