Extracted

• • Target

    58c4112fb9ddff90e381763d258927f8.elf

  • Size

    45KB

  • MD5

    58c4112fb9ddff90e381763d258927f8

  • SHA1

    9375a20b2f6d9c23b8eec6b5493d8c17d91533d8

  • SHA256

    b8577da827f10dbe3909cae50c0465268ae5aeed89a20271d50095ba9c021341

  • SHA512

    20a83fcf0f849c496d4ce0652e2584fd37a123701449a02d166b678e729b015677151112dd707d5669f20994d86e0298adb02a510bc70e15a927e78b6efa8673

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b32d9q3UELbUXfi6nVMQHI4vcGpvp:DECFd+A6YHAxrLRQZp

  Score

  10^/10

  mirailzrdbotnet

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1