Extracted

• • Target

    a34142668f5367637cec898cfb284dddcad10402cf83a8d2b2f254b0bb4f00d9.elf

  • Size

    50KB

  • MD5

    0f5694c5862b194b70c02bfbe0476318

  • SHA1

    ae99523382b6324f612b2b2b2b5579433791640e

  • SHA256

    a34142668f5367637cec898cfb284dddcad10402cf83a8d2b2f254b0bb4f00d9

  • SHA512

    3e246ff52fa1743096bcc5e4415e547c76d9e2fcf73d2d33fa2270a3c968a851308375c8554dc8a73d3f11964bd232a8912dad80cbfb132a5d56bc293d75df45

  • SSDEEP

    1536:oF18iPwsQfUal6BJZsSoSKLuQy4L24JyYmU6:uMsQfUYILoSKLB64sfU6

  Score

  10^/10

  mirailzrdbotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (19611) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Deletes itself

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  behavioral1