Extracted

• • Target

    710fed858bcf0c6d4dd218ca5.elf

  • Size

    36KB

  • MD5

    710fed858bcf0c6d4dd218ca54c4268a

  • SHA1

    f1501ff7636161c45ce00ae035563d5e7873909a

  • SHA256

    8cc1048be834f8370a0c3129486b43da0d94c4de271afe60c1efe3baf764529d

  • SHA512

    ac4e0822e39c5c5059db09702ef54a102de7a7620f2f1f54bc0d4634ba61bf4a3f973be7ba7f26f8941f3aaae4aa0f71ae2c49f4efe3339f97f89e65f829baa4

  • SSDEEP

    768:us7YuqMIEfFV7XSdhczB73+/fDIYoFunbcuyD7UrQRjH:x7Yc3VOvc973CsUnouy8ryb

  Score

  10^/10

  miraiunstbotnetdiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Contacts a large (20251) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1